Resubmissions

05-12-2023 01:47

231205-b7xmhsgf5v 10

02-12-2023 16:12

231202-tnjknadh2w 7

General

  • Target

    SilverRAT_Cracked.zip

  • Size

    19.9MB

  • Sample

    231205-b7xmhsgf5v

  • MD5

    16ec66ff42a4dc6de8378d24cb6162df

  • SHA1

    0755d6015feb665554a7568246cd1119d90e6007

  • SHA256

    4d8ba52f4b0199bec10b90f156a7f56c87200d94c1bbff2f4c6ba53bea4b51ac

  • SHA512

    5fcd035491bb75039dfdcafd54bc86e7aa524cd88d5a04b13757f23a006ec902f564f08ac59c9bb34cb2a059c09d69058883ea8b1dba622134d48544bc108838

  • SSDEEP

    393216:rO+hpxoY/hFNqfeHJVOUQrSmQoKMn2ruEfxaPHD4dzu1zDrh7txMDKIZ/YnS:rO+zxdprpVOUSTpKDhfsPj7N7tGDDZgS

Malware Config

Targets

    • Target

      SilverRAT_Cracked.zip

    • Size

      19.9MB

    • MD5

      16ec66ff42a4dc6de8378d24cb6162df

    • SHA1

      0755d6015feb665554a7568246cd1119d90e6007

    • SHA256

      4d8ba52f4b0199bec10b90f156a7f56c87200d94c1bbff2f4c6ba53bea4b51ac

    • SHA512

      5fcd035491bb75039dfdcafd54bc86e7aa524cd88d5a04b13757f23a006ec902f564f08ac59c9bb34cb2a059c09d69058883ea8b1dba622134d48544bc108838

    • SSDEEP

      393216:rO+hpxoY/hFNqfeHJVOUQrSmQoKMn2ruEfxaPHD4dzu1zDrh7txMDKIZ/YnS:rO+zxdprpVOUSTpKDhfsPj7N7tGDDZgS

    • AgentTesla

      Agent Tesla is a remote access tool (RAT) written in visual basic.

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • AgentTesla payload

    • Async RAT payload

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks