Overview

overview

10

Static

static

10

1cae45a7f4...15.exe

windows7-x64

10

1cae45a7f4...15.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1cae45a7f49649686b4be8f475b56315.exe

  • Size

    63KB

  • Sample

    230223-kywhjahb6w

  • MD5

    1cae45a7f49649686b4be8f475b56315

  • SHA1

    e80f03e273460eafb62f60f7195ac48402e1c51d

  • SHA256

    62b9be575cf2eb0b78544df78d45abc92c6544df62a74398483cbd203c3c3836

  • SHA512

    34af5dc87dccf8403ec71328117fdbc379c45fcf27a54a9bae96787393dc28098c5023b75dc5435bb1141035fdafa57f0a6a466585c4bc469c1be768e3df8200

  • SSDEEP

    1536:4hjMxLDRwQuNMXbmaeCs2lz9oKlI1pbbjwuVGftpqKmY7:4hjMxLDRwQuNMXbreKlz9JQpbbj82z

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

Gh0st Rat 1.0.7

Botnet

Default

C2

43.154.97.109:8848

Mutex

Gh0stRatMutex

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      1cae45a7f49649686b4be8f475b56315.exe

    • Size

      63KB

    • MD5

      1cae45a7f49649686b4be8f475b56315

    • SHA1

      e80f03e273460eafb62f60f7195ac48402e1c51d

    • SHA256

      62b9be575cf2eb0b78544df78d45abc92c6544df62a74398483cbd203c3c3836

    • SHA512

      34af5dc87dccf8403ec71328117fdbc379c45fcf27a54a9bae96787393dc28098c5023b75dc5435bb1141035fdafa57f0a6a466585c4bc469c1be768e3df8200

    • SSDEEP

      1536:4hjMxLDRwQuNMXbmaeCs2lz9oKlI1pbbjwuVGftpqKmY7:4hjMxLDRwQuNMXbreKlz9JQpbbj82z

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

      ratasyncrat

    • Async RAT payload

      rat
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks