Overview

overview

10

Static

static

10

download (1).exe

windows7-x64

10

download (1).exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    download (1).exe

  • Size

    61KB

  • Sample

    230521-mxv7gscc3s

  • MD5

    6064742c6f8a136b29ed885915389ba9

  • SHA1

    5bdb7964d9524b0c1c2ceabadc72e6abee55afc3

  • SHA256

    55df3917ad56d204f96fd28eef9f0803169383497fd543a6e5c4dabbfa897d52

  • SHA512

    6b4f55ef7e94bc774f5856f8ca70c65db0964f30dddc3aaa0855be502d5c71ea5c86ddfba73f4a0f47ecdcd2c0465d5925fc41e0fab3a4ed351eaac92f85b495

  • SSDEEP

    1536:1T6dH9JYaQXD5iETdbcbpgrBg8pkLbkx:1T6dH3YaQXFiE5bc4gVLgx

Score
10/10
asyncratbypassrat

Malware Config

Extracted

Family

asyncrat

Version

| Edit 3LOSH RAT

Botnet

Bypass

C2

ridaq1.is-a-caterer.com:2005

ridaq2.is-a-caterer.com:2005
Mutex

AsyncMutex_red

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      download (1).exe

    • Size

      61KB

    • MD5

      6064742c6f8a136b29ed885915389ba9

    • SHA1

      5bdb7964d9524b0c1c2ceabadc72e6abee55afc3

    • SHA256

      55df3917ad56d204f96fd28eef9f0803169383497fd543a6e5c4dabbfa897d52

    • SHA512

      6b4f55ef7e94bc774f5856f8ca70c65db0964f30dddc3aaa0855be502d5c71ea5c86ddfba73f4a0f47ecdcd2c0465d5925fc41e0fab3a4ed351eaac92f85b495

    • SSDEEP

      1536:1T6dH9JYaQXD5iETdbcbpgrBg8pkLbkx:1T6dH3YaQXFiE5bc4gVLgx

    Score
    10/10
    asyncratbypassrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks