Overview

overview

10

Static

static

10

904-1029-0...ry.exe

windows7-x64

10

904-1029-0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    904-1029-0x0000000005260000-0x0000000005272000-memory.dmp

  • Size

    72KB

  • Sample

    221107-15tkhscaa3

  • MD5

    4470bc77807bb89b792b9b0185673e07

  • SHA1

    53f2197fd762b71ab4f50e9a63cbe3dcfa4b7244

  • SHA256

    5bd409633d70d716dab38c05880c4b486cfeb251666b791bdceab759804efc95

  • SHA512

    c3ff260afbe66c60d0493a226a9f7801915d39a63acc6fe8fa869e7ada7dbc606d5ab99c2e01e748ee10fb92e52bd5104c00a228c100f5b969f0011c533fa751

  • SSDEEP

    1536:MugKNToTdQT26T9JGuk2bkvrEvtiLC6Y6dBtH:MuguToZS26T9JGulb4ID6Y6JH

Score
10/10
asyncratsystem guard runtimerat

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

System Guard Runtime

C2

85.105.88.221:2531

Mutex

System Guard Runtime

Attributes
  • delay

    3

  • install

    false

  • install_file

    System Guard Runtime

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      904-1029-0x0000000005260000-0x0000000005272000-memory.dmp

    • Size

      72KB

    • MD5

      4470bc77807bb89b792b9b0185673e07

    • SHA1

      53f2197fd762b71ab4f50e9a63cbe3dcfa4b7244

    • SHA256

      5bd409633d70d716dab38c05880c4b486cfeb251666b791bdceab759804efc95

    • SHA512

      c3ff260afbe66c60d0493a226a9f7801915d39a63acc6fe8fa869e7ada7dbc606d5ab99c2e01e748ee10fb92e52bd5104c00a228c100f5b969f0011c533fa751

    • SSDEEP

      1536:MugKNToTdQT26T9JGuk2bkvrEvtiLC6Y6dBtH:MuguToZS26T9JGulb4ID6Y6JH

    Score
    10/10
    asyncratsystem guard runtimerat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

      ratasyncrat

    • Async RAT payload

      rat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks