General

  • Target

    9c4830b0679b721498309cae4252dcaa.bin

  • Size

    32KB

  • Sample

    230426-bsz44agb4s

  • MD5

    6ead3b925c719055e434ce3de32045a9

  • SHA1

    4a9a1be8ebac6d52a5a4d463f0e933d4721a84fa

  • SHA256

    04c8b154a2765697d20b650b70d3b1059a9c92cd875a7293dc0c614ab9d5d80f

  • SHA512

    6495cd3cd0d530f9b968ead3e87dcdaeda8bae22d8ccb1650ae940b4dc7f03023084292946e236df8df2936f3512730d46168c26447d97c69f384cf6568453b7

  • SSDEEP

    768:vuPMcGDki+emIIsOTWu9JgV0op/B74n8tX3UWtlHTi:+McfiXmJBCzV0oD7489Ti

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

| Edit 3LOSH RAT

Botnet

Default

C2

65.21.177.234:555

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      0d8b79be30a75cec456ee96c16e62b46f72accf99e3bfa5fa51ecfb6434348a7.exe

    • Size

      60KB

    • MD5

      9c4830b0679b721498309cae4252dcaa

    • SHA1

      7bdec84527c9e023b75119c05ba6e356216ff752

    • SHA256

      0d8b79be30a75cec456ee96c16e62b46f72accf99e3bfa5fa51ecfb6434348a7

    • SHA512

      1954bafdfc809555a83dd453402ec9c6f19c9939d99569cababb462cde904df2c3f06610ed01ab74846c45dd61494e4468a26a4aaca4a79d2cd0e2552826d87e

    • SSDEEP

      1536:Yjnkgpb1azYm1NO+iNTcIn5v+DEbfHZnxKfqDZD3bRx:YjkgppazY6czFn5mwbfPDZD31x

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

MITRE ATT&CK Matrix

Tasks