Overview

overview

10

Static

static

1

tjs_mod_menuprivd.bat

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tjs_mod_menuprivd.bat

  • Size

    431KB

  • Sample

    230328-cwm5daad4y

  • MD5

    2630e333f5b0194b20a181300bbaaa7c

  • SHA1

    b9b9d2b06b5b73ce54dfc5b19083f318d16593e2

  • SHA256

    1603d290f989b872d388b47d44b4747b622c13577c10e03bc9bdb4ce3c0a007d

  • SHA512

    13e9306af1a0c25616080f381b7ab5a2f3872677983b2fb80bc315c55104ae2b1f8a0513196396c0f99e560f4111822ef8278073c99ad4ba72d3cfd76b518000

  • SSDEEP

    12288:4sM2qH2Uo+qndHYdscN9dJ70kmvjCMpJDU9Wpcq:4b2/UlICdskJ7rleo9M

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

Default

C2

181.ip.ply.gg:21614

Mutex

DcRatMutex_qwqdanchun

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      tjs_mod_menuprivd.bat

    • Size

      431KB

    • MD5

      2630e333f5b0194b20a181300bbaaa7c

    • SHA1

      b9b9d2b06b5b73ce54dfc5b19083f318d16593e2

    • SHA256

      1603d290f989b872d388b47d44b4747b622c13577c10e03bc9bdb4ce3c0a007d

    • SHA512

      13e9306af1a0c25616080f381b7ab5a2f3872677983b2fb80bc315c55104ae2b1f8a0513196396c0f99e560f4111822ef8278073c99ad4ba72d3cfd76b518000

    • SSDEEP

      12288:4sM2qH2Uo+qndHYdscN9dJ70kmvjCMpJDU9Wpcq:4b2/UlICdskJ7rleo9M

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat
    behavioral1

MITRE ATT&CK Matrix

Tasks