General

  • Target

    af0a5edc981e2d045ee6060b1a3258d8699651651c4a8846891e58221d31dbb7

  • Size

    409KB

  • Sample

    231120-jxpg6afd21

  • MD5

    585461dbe8526cd6944bea3752f8021a

  • SHA1

    3981ab901d093d98fd83bb7409d5430f63fcdf3a

  • SHA256

    af0a5edc981e2d045ee6060b1a3258d8699651651c4a8846891e58221d31dbb7

  • SHA512

    b5582999235b50f393d24ff743464211acc08dedb31af5ef16098819f68fb53d63d5c0c09e2064cd799528f9d9c41a6836fe711e19a045827432d52c8da9e761

  • SSDEEP

    6144:DGz0wJUkCpNLNaoSr+i67svkD2cBJL0Z3rKSRq:0lqkCnNaoSaimsMD2tBq

Malware Config

Extracted

Family

asyncrat

Botnet

Default

C2

206.233.240.31:4449

Mutex

uomhmqqbwgpdpnrb

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      af0a5edc981e2d045ee6060b1a3258d8699651651c4a8846891e58221d31dbb7

    • Size

      409KB

    • MD5

      585461dbe8526cd6944bea3752f8021a

    • SHA1

      3981ab901d093d98fd83bb7409d5430f63fcdf3a

    • SHA256

      af0a5edc981e2d045ee6060b1a3258d8699651651c4a8846891e58221d31dbb7

    • SHA512

      b5582999235b50f393d24ff743464211acc08dedb31af5ef16098819f68fb53d63d5c0c09e2064cd799528f9d9c41a6836fe711e19a045827432d52c8da9e761

    • SSDEEP

      6144:DGz0wJUkCpNLNaoSr+i67svkD2cBJL0Z3rKSRq:0lqkCnNaoSaimsMD2tBq

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks