General

  • Target

    8e46071281ffee25fdf5e61fc58095cdfe3819178e5d1b785a89411317b91680

  • Size

    168KB

  • Sample

    221125-sjmwvaaf5s

  • MD5

    08bed3a343ee94a0ae7f9dde4bfbab0f

  • SHA1

    c45e7974caa1124f4ae69cfaf17f3e874bbc44f5

  • SHA256

    8e46071281ffee25fdf5e61fc58095cdfe3819178e5d1b785a89411317b91680

  • SHA512

    15a1533c5c2ebbf716da8dc8bc5ee08b22be2bb0da589d830cfa91695730a76b0044367da566d2dee13b9891ebb4108b6a309e7cbca187c522a2637a16211071

  • SSDEEP

    3072:VF15dR71JuPlY7covpZVnY0IdpQB1mmwFrW4l248V3FMrF4MD:VRdZ1JuPlY7covpZ1YwQFCVdKrL

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

chinasea.duckdns.org:5201

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      8e46071281ffee25fdf5e61fc58095cdfe3819178e5d1b785a89411317b91680

    • Size

      168KB

    • MD5

      08bed3a343ee94a0ae7f9dde4bfbab0f

    • SHA1

      c45e7974caa1124f4ae69cfaf17f3e874bbc44f5

    • SHA256

      8e46071281ffee25fdf5e61fc58095cdfe3819178e5d1b785a89411317b91680

    • SHA512

      15a1533c5c2ebbf716da8dc8bc5ee08b22be2bb0da589d830cfa91695730a76b0044367da566d2dee13b9891ebb4108b6a309e7cbca187c522a2637a16211071

    • SSDEEP

      3072:VF15dR71JuPlY7covpZVnY0IdpQB1mmwFrW4l248V3FMrF4MD:VRdZ1JuPlY7covpZ1YwQFCVdKrL

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

    • Async RAT payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks