Overview

overview

10

Static

static

10

2432ed6b0a...0c.exe

windows7-x64

10

2432ed6b0a...0c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2432ed6b0a067ada50f88b2260d23fa5e779ac9d0b1fd7f509bfd2e06db1f90c

  • Size

    53KB

  • Sample

    230327-kzjkcscf44

  • MD5

    084a595c9f7d58ef998d3a7fbbcf6bee

  • SHA1

    9a685d3f1601dc196dd0bb1acae8f2cba3382a30

  • SHA256

    2432ed6b0a067ada50f88b2260d23fa5e779ac9d0b1fd7f509bfd2e06db1f90c

  • SHA512

    098e878ab73445c16cb29bc626b3619684f4425f2e4b0219782e6f4c65ad2c44fe1573ee3ad7df178a1c824235c9b8d8308e591b1de18d4c1ad915945d6e6666

  • SSDEEP

    1536:/x3uMZ+o6rbkFsWexJbMznCpHcrScdKmVcl:/x3uMZ+o6rbssWe3bM2Hc/dK8Y

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.7A

Botnet

Default

C2

127.0.0.1:1234

127.0.0.1:12360

0.tcp.ap.ngrok.io:1234

0.tcp.ap.ngrok.io:12360
Mutex

tqbqldburbffyrz

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      2432ed6b0a067ada50f88b2260d23fa5e779ac9d0b1fd7f509bfd2e06db1f90c

    • Size

      53KB

    • MD5

      084a595c9f7d58ef998d3a7fbbcf6bee

    • SHA1

      9a685d3f1601dc196dd0bb1acae8f2cba3382a30

    • SHA256

      2432ed6b0a067ada50f88b2260d23fa5e779ac9d0b1fd7f509bfd2e06db1f90c

    • SHA512

      098e878ab73445c16cb29bc626b3619684f4425f2e4b0219782e6f4c65ad2c44fe1573ee3ad7df178a1c824235c9b8d8308e591b1de18d4c1ad915945d6e6666

    • SSDEEP

      1536:/x3uMZ+o6rbkFsWexJbMznCpHcrScdKmVcl:/x3uMZ+o6rbssWe3bM2Hc/dK8Y

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Tasks