General

  • Target

    NOTIFICACION DEMNADA EN SU CONTRA.zip

  • Size

    2.4MB

  • Sample

    230828-wgxj2sdg35

  • MD5

    eab9043d44801e29ab6a72ec74db94be

  • SHA1

    fd7f092def19a46e4019c40b623a7f3281b1845e

  • SHA256

    e0a65089c12fdf034f52bba4ffb57a820c100ad9fea20882f1bf2d4cde55b646

  • SHA512

    25c0646951dbe2ae18c107892ea84502f2014d184c59f8d789304cd28b1b9978e8ded675dd6ec449727541f5e64deb7c2b24032c2e7acef7df32bd2544148cba

  • SSDEEP

    49152:PX7k8kt7hSrJfOFPe56aA2HSodgKae3nYPSLYFXzmA6osQ4yb6to9726xWl:PX7kdt7h9FPIXA2H/dxpXEWYFXyZosQK

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

| Edit 3LOSH RAT

Botnet

Default

C2

marli27.duckdns.org:2727

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      NOTIFICACION DEMNADA EN SU CONTRA.zip

    • Size

      2.4MB

    • MD5

      eab9043d44801e29ab6a72ec74db94be

    • SHA1

      fd7f092def19a46e4019c40b623a7f3281b1845e

    • SHA256

      e0a65089c12fdf034f52bba4ffb57a820c100ad9fea20882f1bf2d4cde55b646

    • SHA512

      25c0646951dbe2ae18c107892ea84502f2014d184c59f8d789304cd28b1b9978e8ded675dd6ec449727541f5e64deb7c2b24032c2e7acef7df32bd2544148cba

    • SSDEEP

      49152:PX7k8kt7hSrJfOFPe56aA2HSodgKae3nYPSLYFXzmA6osQ4yb6to9726xWl:PX7kdt7h9FPIXA2H/dxpXEWYFXyZosQK

    Score
    1/10
    • Target

      NOTIFICACION DEMNADA EN SU CONTRA/1 NOTIFICACION DEMNADA EN SU CONTRA ...exe

    • Size

      3.6MB

    • MD5

      b715350905b9929d73f23bfced524f9f

    • SHA1

      e2d229648da668e6f4db02f843fbf3d33a160f6e

    • SHA256

      ddbfe7b56e871f221aedd2c0aa80f18f506b36cbb030bc3958f188c086fdf8be

    • SHA512

      171c90d5bc1f0f7b228f0a695469c4581dc3ee79a6499c3a2e16eeddff32d02cb59d1bb5a205ce3b37c441c191711fa8c0d3db75f33821e38cbd4af28b2cc794

    • SSDEEP

      49152:mI8msRR0cePMyfKZsU6Voz6KKT+AS8aeVMZ7qWuu2CwAj:+RZsZOFKT+AQ2

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

    • Suspicious use of SetThreadContext

    • Target

      NOTIFICACION DEMNADA EN SU CONTRA/115.0.21984.175.manifest

    • Size

      230B

    • MD5

      5f6c9c7e3dd52b13a62567da6b5a244c

    • SHA1

      a79fb0ee82e11f80f95faa73f5066d5d615ed1a8

    • SHA256

      bc7d7608214c4c196e4d7f9a20d814514abfd35e63995b096c8bb1aea6d0e498

    • SHA512

      741092584bf19d3f6d77a68965eec0d6f02a642d6a80092ab0619083d7af448e7b4f3f352f87abd819cd9d6341f9779ce9918e0ecfa1af720331bbecce030b8a

    Score
    3/10
    • Target

      NOTIFICACION DEMNADA EN SU CONTRA/chrome_elf.dll

    • Size

      1.3MB

    • MD5

      9454dc1b9654276872b830e16ee5098b

    • SHA1

      b6017ee5f075d3aa094d1602463ab1aaeaaae7e6

    • SHA256

      5c75a04cf21c5a896b9343d043e889514f0ee70ec6b0943ccc400d7cb623ed3c

    • SHA512

      1f0478992597d56d91eec1648d412328171a8e3d052947791470e683f7f1ea5e67ec78fef3ad184d2ad15b03417b0f008d97f120b7ef4046fc37382ac53a64b9

    • SSDEEP

      24576:FIXgXwt9vIXJjYmLWnzGb7eAzt6BgKnYT1bhe28EO:27yJsm6yb7e+YgRQx

    Score
    3/10
    • Target

      NOTIFICACION DEMNADA EN SU CONTRA/dorse.log

    • Size

      371KB

    • MD5

      2a157d4be2c6a6510bece41259d298ae

    • SHA1

      421926187412316750ebae02731aeab74d9ec1a3

    • SHA256

      c058adaa886283b21274f5ff171e40309811d3460f70b9f93a68bd1f483fe607

    • SHA512

      d579fd003d8e860812df66bccbcb1ccbcedc69ad2d24ba4eef09763fab2504324a076a9decf25a84662c79ec825264385e9446f5e10d7ebb4e7594deca6b3696

    • SSDEEP

      6144:orcBHpgW4WP+t4LdXEcja77Ej1ucdZo64PT0lZ4I7vLsVe3KIckbstI:fFDjP+2JcXEpSZyZ4IDLsVfIzbYI

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks