General

  • Target
    Stub.exe
  • Size 58KB
  • Sample221206-vb9rraeh63
  • SHA256 6fb463643f9bcf44fe05bde709217e76660efbe6b6174e36d4f192da995bb783
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • asyncrat

Version
  • | Edit 3LOSH RAT

Botnet
  • Default

C2
  • 127.0.0.1:6121

  • 2.58.56.243:6121

Mutex
  • AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target
      Stub.exe
    • Size 58KB
    • SHA256 6fb463643f9bcf44fe05bde709217e76660efbe6b6174e36d4f192da995bb783
    • MD5 SHA1 SHA512 SSDEEP
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

    • Async RAT payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks