asyncrat | 99f3be344f93a5d487c49260f2636602c44930ff7c5fea908b3ccd59fbe5b8c1 | Triage

Sharing

General

Target

99f3be344f93a5d487c49260f2636602c44930ff7c5fea908b3ccd59fbe5b8c1
Size

9.0MB
Sample

221130-rakjpaad5z
MD5

8b1ccce8f40669f2435c69ff9325694a
SHA1

4ac0286ca055acb1761ad83d1ee806e95cf0e04e
SHA256

99f3be344f93a5d487c49260f2636602c44930ff7c5fea908b3ccd59fbe5b8c1
SHA512

3e451d9b7cf612579989ad1f0026cfc15eb7565851189164bb6665a8942f873f064e7882ab1d1a82c5f3701d4c5ebccf9d94fcc215a7ef0022642fbc8fee0f74
SSDEEP

196608:CI0tHoI0tHoI0tHoI0tHoI0tHoI0tHoI0tHoI0tH:Cqqqqqqq

Score

10^/10

asyncrat rat

Malware Config

Extracted

Family

asyncrat

Version

0.5.6B

C2

rony.ooguy.com:6606

rony.ooguy.com:7707

rony.ooguy.com:8808

Mutex

eekldwatyqsu

Attributes

delay
95
install
true
install_file
ccleanerr.exe
install_folder
%AppData%

aes.plain

Targets

- Target
  
  99f3be344f93a5d487c49260f2636602c44930ff7c5fea908b3ccd59fbe5b8c1
- Size
  
  9.0MB
- MD5
  
  8b1ccce8f40669f2435c69ff9325694a
- SHA1
  
  4ac0286ca055acb1761ad83d1ee806e95cf0e04e
- SHA256
  
  99f3be344f93a5d487c49260f2636602c44930ff7c5fea908b3ccd59fbe5b8c1
- SHA512
  
  3e451d9b7cf612579989ad1f0026cfc15eb7565851189164bb6665a8942f873f064e7882ab1d1a82c5f3701d4c5ebccf9d94fcc215a7ef0022642fbc8fee0f74
- SSDEEP
  
  196608:CI0tHoI0tHoI0tHoI0tHoI0tHoI0tHoI0tHoI0tH:Cqqqqqqq
Score

10^/10

asyncrat rat
- AsyncRat
  AsyncRAT is designed to remotely monitor and control other computers.
  rat asyncrat
- Async RAT payload
  rat
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

Impact

Tasks

static1

behavioral1

behavioral2