General

  • Target

    Stub.exe

  • Size

    62KB

  • Sample

    230402-zcz16aae27

  • MD5

    861717db2006acc5c994f64200f11466

  • SHA1

    599def93ef9d01cfbe2917475b47a95b4c9891d7

  • SHA256

    dc3030464177cdf0d0822c1c8b745540a888b9e334da2bc560e034a09f973fea

  • SHA512

    3bd0c598534aba92bec71e3790db31e06190f74d51469406047a3080166f7b4988fa8c47232a72f6afc4cd0c781e154c10c9c81bf35d32f82e68e8a9f672cb81

  • SSDEEP

    1536:ZPrVFns05+wtMwgK7hnDYbdfx9Vx7lx+JermkRq7wx:ZPrVFns05+uMwgShMbdfxZOexqkx

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

| Edit 3LOSH RAT

Botnet

Default

C2

xxxpasoxxx.ddnsfree.com:8808

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Stub.exe

    • Size

      62KB

    • MD5

      861717db2006acc5c994f64200f11466

    • SHA1

      599def93ef9d01cfbe2917475b47a95b4c9891d7

    • SHA256

      dc3030464177cdf0d0822c1c8b745540a888b9e334da2bc560e034a09f973fea

    • SHA512

      3bd0c598534aba92bec71e3790db31e06190f74d51469406047a3080166f7b4988fa8c47232a72f6afc4cd0c781e154c10c9c81bf35d32f82e68e8a9f672cb81

    • SSDEEP

      1536:ZPrVFns05+wtMwgK7hnDYbdfx9Vx7lx+JermkRq7wx:ZPrVFns05+uMwgShMbdfxZOexqkx

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

MITRE ATT&CK Matrix

Tasks