General

  • Target

    tmp

  • Size

    1.6MB

  • Sample

    230325-h6757abf54

  • MD5

    372c27b8294da7fdb472a08ceb4db8f1

  • SHA1

    27122520acebb507edac27212b61b0799acdc3da

  • SHA256

    a95fcc8fcc95ac26001805bb0afe26633d6020d58c44533e17e3e9f1d62ab5ed

  • SHA512

    d0076349398166d6692f2bb21896e7419eef5a3ae62ce58633bb6225a43e26b84f9ff80153a3673f890842fc810df62a68957406a3d17f4035a3ebe8900ef407

  • SSDEEP

    49152:pPZCrE86CBVbsdBlBNshFOmpl/dp8WT9LJkA2A+gMSSf5XXvEUSyJ:1uE86CHKBlBNshFTl/dlT9LJkQlM7f5H

Score
10/10

Malware Config

Extracted

Credentials

  • Protocol:
    ftp
  • Host:
    45.151.135.235
  • Port:
    21
  • Username:
    123
  • Password:
    123

Extracted

Family

asyncrat

C2

202.95.14.199:8848

Mutex

58964968563945

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      tmp

    • Size

      1.6MB

    • MD5

      372c27b8294da7fdb472a08ceb4db8f1

    • SHA1

      27122520acebb507edac27212b61b0799acdc3da

    • SHA256

      a95fcc8fcc95ac26001805bb0afe26633d6020d58c44533e17e3e9f1d62ab5ed

    • SHA512

      d0076349398166d6692f2bb21896e7419eef5a3ae62ce58633bb6225a43e26b84f9ff80153a3673f890842fc810df62a68957406a3d17f4035a3ebe8900ef407

    • SSDEEP

      49152:pPZCrE86CBVbsdBlBNshFOmpl/dp8WT9LJkA2A+gMSSf5XXvEUSyJ:1uE86CHKBlBNshFTl/dlT9LJkQlM7f5H

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

MITRE ATT&CK Matrix

Tasks