General

  • Target

    7931baaecb6053fe95402d3570a9205265d4689d81fea6e96208895507fc79d0

  • Size

    379KB

  • Sample

    231116-hhqk8sga62

  • MD5

    9a393ebb8ccc6072aba32146bb066a30

  • SHA1

    62e5aedd23433e896ff6c329969eb5cf6443eb06

  • SHA256

    7931baaecb6053fe95402d3570a9205265d4689d81fea6e96208895507fc79d0

  • SHA512

    95cfeccc15782cac46fc8dd870d9e56ea12ab7339366c174721ae601e3c60beabc7403780d21be08835a7b9dd4dd8ef24a07127aa09a6147170a26a5c0cd5086

  • SSDEEP

    6144:NA7nPr20GEBy7l75VLvYaqmupLLR4vYFdiodh:m7rbTy7R5VLEmEd4vYFdiodh

Malware Config

Extracted

Family

asyncrat

Botnet

Default

C2

154.39.251.210:4449

Mutex

attmiqczsssyiyuf

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      7931baaecb6053fe95402d3570a9205265d4689d81fea6e96208895507fc79d0

    • Size

      379KB

    • MD5

      9a393ebb8ccc6072aba32146bb066a30

    • SHA1

      62e5aedd23433e896ff6c329969eb5cf6443eb06

    • SHA256

      7931baaecb6053fe95402d3570a9205265d4689d81fea6e96208895507fc79d0

    • SHA512

      95cfeccc15782cac46fc8dd870d9e56ea12ab7339366c174721ae601e3c60beabc7403780d21be08835a7b9dd4dd8ef24a07127aa09a6147170a26a5c0cd5086

    • SSDEEP

      6144:NA7nPr20GEBy7l75VLvYaqmupLLR4vYFdiodh:m7rbTy7R5VLEmEd4vYFdiodh

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks