Overview

overview

10

Static

static

10

sc0pe_extr..._0.exe

windows7-x64

10

sc0pe_extr..._0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    sc0pe_extracted_pe_0.exe

  • Size

    66KB

  • Sample

    230715-zy1jtabg99

  • MD5

    5fd6e1666df6f41e1b5e6833ef8a9190

  • SHA1

    0f98687ebcd35f7b81d1591a275b46669ff84f2f

  • SHA256

    627894cfaf95a89fa554d3e623fa9d5ef26a27f0f61faa549f5cb8767bb713cf

  • SHA512

    68688935db5e06e76f49b7acd3ae22e88883257884d707a84e0f741f99b4f157974d7c1505aa281b3486eb8374bb06593f578373c56a922bdc0733d1bc5db0f6

  • SSDEEP

    1536:C2wukvF1ak9gcKu5UYFVGc9xinmb1oEDGFIMcJOorPlTGxx:C2dkvF1ak9Ku5UYFVGYximb1ecJ/dCx

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

| Edit 3LOSH RAT

Botnet

Default

C2

largo777.kozow.com:6969

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      sc0pe_extracted_pe_0.exe

    • Size

      66KB

    • MD5

      5fd6e1666df6f41e1b5e6833ef8a9190

    • SHA1

      0f98687ebcd35f7b81d1591a275b46669ff84f2f

    • SHA256

      627894cfaf95a89fa554d3e623fa9d5ef26a27f0f61faa549f5cb8767bb713cf

    • SHA512

      68688935db5e06e76f49b7acd3ae22e88883257884d707a84e0f741f99b4f157974d7c1505aa281b3486eb8374bb06593f578373c56a922bdc0733d1bc5db0f6

    • SSDEEP

      1536:C2wukvF1ak9gcKu5UYFVGc9xinmb1oEDGFIMcJOorPlTGxx:C2dkvF1ak9Ku5UYFVGYximb1ecJ/dCx

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks