General

  • Target

    5e9cf194d28e22718aa580991d8f15df.bin

  • Size

    23KB

  • Sample

    230206-k14lxsgc7x

  • MD5

    20810f473cbfe45a8e859b583f6b02d7

  • SHA1

    1fc7d55ddffe5e769a658d3e6314b46428ebb8ee

  • SHA256

    3b7c79a0d9b63348eb5786ee405466e224c825a828c0adc255dbb94631d81b26

  • SHA512

    caf1228f0e7fb762a1463f76cf3c3fc8159d9603255e990f68b12cb5d1105d0007b905610a58cd31ec3145492e7ac5da0c4261ee799102622feda35245f70b75

  • SSDEEP

    384:gSmdjqRP9WOnfhmOxajQuAbEpM8IDnyuvrM81L7Mp67UN95581:keRo0hmOxannpMVDnyuvrNGrk

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

Default

Mutex

fArmMaBaSRfuPWksjdA

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

  • pastebin_config

    https://pastebin.com/FcHGaN0M

aes.plain

Targets

    • Target

      5432086daa9ec74b311002f8cf2d9c110414b342366941fda6732a7a264562c0.exe

    • Size

      47KB

    • MD5

      5e9cf194d28e22718aa580991d8f15df

    • SHA1

      055e7ba5d1a80e2f619792e063bfa2a5372ecd5e

    • SHA256

      5432086daa9ec74b311002f8cf2d9c110414b342366941fda6732a7a264562c0

    • SHA512

      49a1ce959439d1aaff770fbe2ae5f23483e5cd311eaf19cf06e33cbf69b44dd6d11086ce5fb223698214d6cc025e5cf249a40fcd4d509c655472526d95b30843

    • SSDEEP

      768:4G+s3CjtDILWCCa+DiptelDSN+iV08YbygeTbCvEgK/JvZVc6KN:4G+AatpOptKDs4zb1cenkJvZVclN

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

    • Async RAT payload

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Matrix ATT&CK v6

Command and Control

Web Service

1
T1102

Tasks