General

  • Target

    Backdoor.MSIL.Crysan.ecy-af2b52d74cb468b141d03dcd688cc0b184164c906464ba830ffe4b4ab7fc812d.exe

  • Size

    45KB

  • Sample

    221228-k9f7zshh33

  • MD5

    3ce7eda1d2489fb2a93bdd839699e64d

  • SHA1

    fb0e23aeec7d9204d863bf91945e76cb41fd5842

  • SHA256

    af2b52d74cb468b141d03dcd688cc0b184164c906464ba830ffe4b4ab7fc812d

  • SHA512

    d79d7bdc44930f1a99fc47d101605ae65bf1654026c47b3263f267c35c4a387edb437d05c852d4aca4c226191004c1ab7ecac6b70938d701eff430859a356209

  • SSDEEP

    768:vuwCfTg46YbWUn8jjmo2qrDKjGKG6PIyzjbFgX3iODt3RmRuuDFau6BDZSx:vuwCfTgp/2OKYDy3bCXSM3M09ukdSx

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

192.3.101.108:6606

192.3.101.108:7707

192.3.101.108:8808

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Backdoor.MSIL.Crysan.ecy-af2b52d74cb468b141d03dcd688cc0b184164c906464ba830ffe4b4ab7fc812d.exe

    • Size

      45KB

    • MD5

      3ce7eda1d2489fb2a93bdd839699e64d

    • SHA1

      fb0e23aeec7d9204d863bf91945e76cb41fd5842

    • SHA256

      af2b52d74cb468b141d03dcd688cc0b184164c906464ba830ffe4b4ab7fc812d

    • SHA512

      d79d7bdc44930f1a99fc47d101605ae65bf1654026c47b3263f267c35c4a387edb437d05c852d4aca4c226191004c1ab7ecac6b70938d701eff430859a356209

    • SSDEEP

      768:vuwCfTg46YbWUn8jjmo2qrDKjGKG6PIyzjbFgX3iODt3RmRuuDFau6BDZSx:vuwCfTgp/2OKYDy3bCXSM3M09ukdSx

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

    • Async RAT payload

MITRE ATT&CK Matrix

Tasks