Overview

overview

10

Static

static

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    file.exe

  • Size

    269KB

  • Sample

    221102-d6gk1shgal

  • MD5

    9c35652428e65743f62c64ef9f438720

  • SHA1

    3033b685e04235c4c47728d08ae6e37a541f4fa0

  • SHA256

    7ff14c21fd0b01bdde72c128356802e29242809bd3965e234ac1231da1c0893a

  • SHA512

    f8bd6262a8a62e32df8af54e2ed55124c72cc816e223b69f5ac2f8964cc4d972953cb02a12684194d5d788b74fc2570531cb8af6e2f1007b043ecea65d17cb63

  • SSDEEP

    6144:K4CDG3KlWcozB8VgrZx+RROpONPNOw9cSYlHy5khdYoJ8LU:kKtZx+RRRNOw9jY1zYG

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

chinasea.duckdns.org:5201

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      file.exe

    • Size

      269KB

    • MD5

      9c35652428e65743f62c64ef9f438720

    • SHA1

      3033b685e04235c4c47728d08ae6e37a541f4fa0

    • SHA256

      7ff14c21fd0b01bdde72c128356802e29242809bd3965e234ac1231da1c0893a

    • SHA512

      f8bd6262a8a62e32df8af54e2ed55124c72cc816e223b69f5ac2f8964cc4d972953cb02a12684194d5d788b74fc2570531cb8af6e2f1007b043ecea65d17cb63

    • SSDEEP

      6144:K4CDG3KlWcozB8VgrZx+RROpONPNOw9cSYlHy5khdYoJ8LU:kKtZx+RRRNOw9jY1zYG

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

      ratasyncrat

    • Async RAT payload

      rat

    • Drops startup file

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks