General

  • Target

    Ta.zip

  • Size

    2.4MB

  • Sample

    230502-gwf4aahh44

  • MD5

    207755332e7de0ac43bce9ec59534e30

  • SHA1

    ea8b222d0c09a704e0b84a97ed480be4d2360d38

  • SHA256

    458bacf7b28381813ab395db163843e71f62a830db1e1274178c14d91d435ca6

  • SHA512

    9e0086b1afcbdde339de0f2384e7170693c7eb08832e17f7a7c4e0ff53b3b8ee8e8c10a2fda5353a57df33b483af5cd406b954fe86c900d177ca434128d6cd24

  • SSDEEP

    12288:u1F1xdEl2aB9GfUh2m3Nx+3ezaOkkTJTIVF/K2EKL9EVQa:AF1xul2aB9RhBb+UjT+VJaIOVB

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

45.81.243.217:6606

45.81.243.217:7707

45.81.243.217:8808

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Ta.exe

    • Size

      1024.0MB

    • MD5

      ad6af2d313b7118ff811eeaa49e740ad

    • SHA1

      f3ea74dae94644c095674bd8d1619a979388d569

    • SHA256

      4b34980497ed08e0f3958cc83b63dbf5cd84879333d176e8df5910694ec728ae

    • SHA512

      8a6cad20817c4c118c9c09a7f59b70d5fe17ee39576eedf8c27c2765e84ca45af4e12b760966f882ca148de47a81d72e90331f058e08787cb9b2150cd969ec4f

    • SSDEEP

      12288:94mT/RcXtvyJdBQhXVQprDv4alfZqby13caYgd2Dm/txt:94C/6XtvWBmQprT4gcaYgdPD

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

MITRE ATT&CK Matrix

Tasks