Overview

overview

10

Static

static

1

bab043fddb...27.exe

windows7-x64

10

bab043fddb...27.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bab043fddb62220646c6654603e7de7d58ece2f82b89257fe8cef51d186a1027.zip

  • Size

    97KB

  • Sample

    230321-rv5elada8s

  • MD5

    61b51507892109b4f5899677ef718155

  • SHA1

    6918fd9c1b4c6bc0a86eb54ca9268ae135fec160

  • SHA256

    38ebe2ced484ae640700a555c7c0f4e0d3839e203c2e9ec159ac09858220d05b

  • SHA512

    cadfaf05a05b6d0cf039c453edebd4eeca02e772968537bbe9ec2c52806030a90c0567ebbafeb0b957d148148c6b0fd20ae20bbdf8179978f9f6bf97ecc61b04

  • SSDEEP

    3072:UPKGGLHiNwT7tPA175kHHta2pJHn9NnYn:UPYC+XtC5kHHM2pJH9Ng

Score
10/10
asyncrattestrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

test

C2

95.214.27.197:6969

Mutex

wachofumaporro22

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      bab043fddb62220646c6654603e7de7d58ece2f82b89257fe8cef51d186a1027.exe

    • Size

      160KB

    • MD5

      766faae40a167667cb2c3f9904d7c497

    • SHA1

      5dae92ed24f8e74e613ffc8adf118fa83b915822

    • SHA256

      bab043fddb62220646c6654603e7de7d58ece2f82b89257fe8cef51d186a1027

    • SHA512

      9e5b7e0c03556abab5c9ca88cb7e79fdd120af1e53c807ea4697e548e671dbde6225d4a413f07c87e41a25b2849efa3af01e7c6194a4b144277d33947a10015c

    • SSDEEP

      3072:MCGltFQQLmQmchdf44/asyRCh/bMzLRtUZKODeybC:DiLQS7UChIzLRtUZKqdm

    Score
    10/10
    asyncrattestrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks