Overview

overview

10

Static

static

10

Infected.exe

windows7-x64

10

Infected.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Infected.exe

  • Size

    63KB

  • Sample

    230718-lyklpshd95

  • MD5

    ac93c3d16135b7b127ef74fdc4f265fe

  • SHA1

    a24c9e1e1b8ac6dc819863d4da399b62ff480b81

  • SHA256

    6b26489e9ea105cbde6338e49b0cc74c6dcc75b3c046ed7f0541732b55c99404

  • SHA512

    6307d7bd118c165c2eaecc553aee9973d69d58c22c851cef6a5b2a191e3ba43027b5fe0799f93a285b2824e699c2d8f30a18a74e3127a545d0e30274ba13bbb9

  • SSDEEP

    768:iit3pYNlrm78RIC8A+XjqazcBRL5JTk1+T4KSBGHmDbD/ph0oXOJI+FIJeq8Su4V:jyr0AdSJYUbdh9r+enu4dpqKmY7

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Botnet

Default

C2

wasted9sss1-57562.portmap.host:57562

Mutex

aΗEIa杰Pr7tZΗ德迪TM

Attributes
  • delay

    1

  • install

    true

  • install_file

    monke.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Infected.exe

    • Size

      63KB

    • MD5

      ac93c3d16135b7b127ef74fdc4f265fe

    • SHA1

      a24c9e1e1b8ac6dc819863d4da399b62ff480b81

    • SHA256

      6b26489e9ea105cbde6338e49b0cc74c6dcc75b3c046ed7f0541732b55c99404

    • SHA512

      6307d7bd118c165c2eaecc553aee9973d69d58c22c851cef6a5b2a191e3ba43027b5fe0799f93a285b2824e699c2d8f30a18a74e3127a545d0e30274ba13bbb9

    • SSDEEP

      768:iit3pYNlrm78RIC8A+XjqazcBRL5JTk1+T4KSBGHmDbD/ph0oXOJI+FIJeq8Su4V:jyr0AdSJYUbdh9r+enu4dpqKmY7

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks