General

  • Target

    Stub.exe

  • Size

    58KB

  • Sample

    221206-vb9rraeh63

  • MD5

    a59b67092c4f36d3cdf0e781ecead673

  • SHA1

    6820b89daa11927360ad4d5332943e0eff98b61b

  • SHA256

    6fb463643f9bcf44fe05bde709217e76660efbe6b6174e36d4f192da995bb783

  • SHA512

    47d01dd806229864d3876c6fd01502e7609aea2b898c9031b7bc712418f45fabf07be9ca8684abab9d50cbaca3cf7f29efaac6aa2fe15a751bd4852bf0b96e37

  • SSDEEP

    1536:Uh6KAUiFRUSST5IWyc9bwT2teOuHHFE8LAIbbcx:Uh6KAUiFRvST5xyc9bwbFE3IbQx

Malware Config

Extracted

Family

asyncrat

Version

| Edit 3LOSH RAT

Botnet

Default

C2

127.0.0.1:6121

2.58.56.243:6121

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Stub.exe

    • Size

      58KB

    • MD5

      a59b67092c4f36d3cdf0e781ecead673

    • SHA1

      6820b89daa11927360ad4d5332943e0eff98b61b

    • SHA256

      6fb463643f9bcf44fe05bde709217e76660efbe6b6174e36d4f192da995bb783

    • SHA512

      47d01dd806229864d3876c6fd01502e7609aea2b898c9031b7bc712418f45fabf07be9ca8684abab9d50cbaca3cf7f29efaac6aa2fe15a751bd4852bf0b96e37

    • SSDEEP

      1536:Uh6KAUiFRUSST5IWyc9bwT2teOuHHFE8LAIbbcx:Uh6KAUiFRvST5xyc9bwbFE3IbQx

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

    • Async RAT payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Collection

Data from Local System

1
T1005

Tasks