Overview

overview

10

Static

static

10

7491fe50fe...99.exe

windows7-x64

10

7491fe50fe...99.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7491fe50fef18bbe9d219ef65e449723f0606f447283c744e03ace013c936099

  • Size

    636KB

  • Sample

    231130-wj9mdsfd75

  • MD5

    f4e6aa4825c73359afc52772141b9ba0

  • SHA1

    0e1cb4c1892e31dcd8969619258e80eef17193b4

  • SHA256

    7491fe50fef18bbe9d219ef65e449723f0606f447283c744e03ace013c936099

  • SHA512

    98f93c31fa813bf4fbafdd58a0b179d744f782a86be5628a464b66fa8119be9fe8969034b38bcf7460afba29d3ec5eb594892f36674d0e3d4780e05cefebbdde

  • SSDEEP

    12288:eBjETYUIkLlp2arppSA0ckNMp3S/9aRCdd:9TYUIklpZPGypu9bdd

Score
10/10
asyncratpurelogszgratpersistenceratstealer

Malware Config

Targets

    • Target

      7491fe50fef18bbe9d219ef65e449723f0606f447283c744e03ace013c936099

    • Size

      636KB

    • MD5

      f4e6aa4825c73359afc52772141b9ba0

    • SHA1

      0e1cb4c1892e31dcd8969619258e80eef17193b4

    • SHA256

      7491fe50fef18bbe9d219ef65e449723f0606f447283c744e03ace013c936099

    • SHA512

      98f93c31fa813bf4fbafdd58a0b179d744f782a86be5628a464b66fa8119be9fe8969034b38bcf7460afba29d3ec5eb594892f36674d0e3d4780e05cefebbdde

    • SSDEEP

      12288:eBjETYUIkLlp2arppSA0ckNMp3S/9aRCdd:9TYUIklpZPGypu9bdd

    Score
    10/10
    asyncratpurelogszgratpersistenceratstealer

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Detect PureLogs payload

    • Detect ZGRat V1

    • PureLogs

      PureLogs is an infostealer written in C#.

      stealerpurelogs

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Async RAT payload

      rat

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks