Overview

overview

10

Static

static

vb.bat

windows7-x64

8

vb.bat

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    vb.bat.zip

  • Size

    34KB

  • Sample

    230126-gkr2eacf35

  • MD5

    324cae2dd09fb47881e52a0e6d8405fc

  • SHA1

    42a554a6e047e1260c3e116f74ef8375f556e1ef

  • SHA256

    ac821c02af3b7eab9fec420f8f318ccbf9309f7b3d7bd50c0860fd3e8614d1d5

  • SHA512

    3a63f51ab1ef35bda5246859bc1f5266a0ecef5d3f1828e404778f19699f3f756345ebf7a2b8a4b285241ab48e2f380bd1fe639bad1e392277d332d2e4ba552d

  • SSDEEP

    768:E+Q5D2dHgOLA2AXtr+swVmVPbuuIkrrwk4lGbAHpaAjCn:E+NxgT2er+s7buWwRasCn

Score
10/10
asyncratrat

Malware Config

Targets

    • Target

      vb.bat

    • Size

      49KB

    • MD5

      6f5df197740503ef41d815c9366c665b

    • SHA1

      05d2eb5d6dc5255f15679089a01a1c091e7564db

    • SHA256

      37073ac11600c6c5d053cb537a5be9a4153f5b8720645b8852ba882f58a0510b

    • SHA512

      cea369f2130fe84f02dcb2eab43c7bccaa14a97305a80c31b7013d436651e1cd7b3216b2407333dd99b4111d01b2bb129a621f22cdf760c446154ece12a86bca

    • SSDEEP

      768:i3cYe7RNiqxH5VnLrd+hwoin6XY+kaVKgsvi8nMPj7YTwE3Bs52Hz4Cd8y:i9wyqxDLr6kaVRbKweByaF8y

    Score
    10/10
    asyncratrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

      ratasyncrat

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks