General

  • Target

    1212-66-0x0000000000400000-0x0000000000412000-memory.dmp

  • Size

    72KB

  • Sample

    230609-17wgwsed4x

  • MD5

    f95207c547359c680183ce88836a9c2e

  • SHA1

    b33e76e727422ba0470e693da068163bc2c2d14c

  • SHA256

    b7d9cbcf8f259f0d23193c2908a5a2d1cc2b111d2de792e9f9812d1303b374db

  • SHA512

    919c0b3d0f2a26b12394611794249ad9b934324eebc2ab6730ac439170b0671abde7ab9ea200f481bff7c3531cc640d0b19e84da20c442e2382430155bfb333d

  • SSDEEP

    768:CuIYdTxJzlTWU/Wmhmo2qblyDj8lpnFePIGMpz4m40bf5k5p4ePDOF/3HcBDZkx:CuIYdTxFp2+VLn1hpEcbf5l3F/qdkx

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

fresh03.ddns.net:45265

fresh03.ddns.net:34110

fresh03.ddns.net:2245

fresh01.ddns.net:45265

fresh01.ddns.net:34110

fresh01.ddns.net:2245

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    true

  • install_file

    logs.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      1212-66-0x0000000000400000-0x0000000000412000-memory.dmp

    • Size

      72KB

    • MD5

      f95207c547359c680183ce88836a9c2e

    • SHA1

      b33e76e727422ba0470e693da068163bc2c2d14c

    • SHA256

      b7d9cbcf8f259f0d23193c2908a5a2d1cc2b111d2de792e9f9812d1303b374db

    • SHA512

      919c0b3d0f2a26b12394611794249ad9b934324eebc2ab6730ac439170b0671abde7ab9ea200f481bff7c3531cc640d0b19e84da20c442e2382430155bfb333d

    • SSDEEP

      768:CuIYdTxJzlTWU/Wmhmo2qblyDj8lpnFePIGMpz4m40bf5k5p4ePDOF/3HcBDZkx:CuIYdTxFp2+VLn1hpEcbf5l3F/qdkx

    Score
    1/10

MITRE ATT&CK Matrix

Tasks