General

  • Target

    1 NOTIFICACION DEMANDA.REV

  • Size

    1.8MB

  • Sample

    240119-xpvwvscdd8

  • MD5

    294c11b20ab53ed4b6e02bf2584d4fe4

  • SHA1

    5dea82ff0b8df8b923e8c03f2aca1d0a3877c367

  • SHA256

    717d495a0fa09889abeb7eb44f5395ee7cfc22a79ec6020d3452110c293f53c4

  • SHA512

    8605fcac90c0da7d79b1c63710b2657a118fe65231871356201825641e5f02d528df75145db2cf8b5724e83e4c8d561cea647710e0aad346aab84650e12ab225

  • SSDEEP

    49152:epkhEAZmF7pOAzaOD3molRe8iZPHmtNsj:JD0F9O4abolQZmto

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

| CRACKED BY https://t.me/xworm_v2

Botnet

Default

C2

ancy2024.kozow.com:1234

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      1 NOTIFICACION DEMANDA/1 NOTIFICACION DEMANDA ..exe

    • Size

      135KB

    • MD5

      a2d70fbab5181a509369d96b682fc641

    • SHA1

      22afcdc180400c4d2b9e5a6db2b8a26bff54dd38

    • SHA256

      8aed681ad8d660257c10d2f0e85ae673184055a341901643f27afc38e5ef8473

    • SHA512

      219c6e7e88004fad9f4392be9a852c58fc43b7f6900e40370991427f37eaea5c18f48d2954f9479dde8bcb787345f4e292d5620add8224aec4d93d7968820b83

    • SSDEEP

      1536:URLRDTAC1CMoR1CqabJWt7AQFYMGhw1ScCD28v2Vv428fmvxOuw03h9VC:URdV1CMoiqadTQFBGhw1ED28+94hGw

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

    • Suspicious use of SetThreadContext

    • Target

      1 NOTIFICACION DEMANDA/Register.dll

    • Size

      1.0MB

    • MD5

      dd001e7a2f751f6c9e8c40e23307d102

    • SHA1

      22fdeab3d891334e2e27d970b3a5680d45cb3371

    • SHA256

      e2b66236119bfea1571f423a721b1c4495b2363a0af83b8ec2ea728b4fdd7d7a

    • SHA512

      ee9591e952028aab264ed6fa51369bb5c8d7aee4eaf735fd2f78b4559e2d07791d4d9777478d93be9de8952fa70105d9c431a48d380eebe637138fa188d7aae7

    • SSDEEP

      24576:a0RdvjwJ4ZCWQufs54Quz27j7BS2Nv+4BT8+uCI:bDhTzAj7pXT3S

    Score
    1/10
    • Target

      1 NOTIFICACION DEMANDA/rtl120.bpl

    • Size

      1.1MB

    • MD5

      adf82ed333fb5567f8097c7235b0e17f

    • SHA1

      e6ccaf016fc45edcdadeb40da64c207ddb33859f

    • SHA256

      d6dd7a4f46f2cfde9c4eb9463b79d5ff90fc690da14672ba1da39708ee1b9b50

    • SHA512

      2253c7b51317a3b5734025b6c7639105dbc81c340703718d679a00c13d40dd74ccaba1f6d04b21ee440f19e82ba680aa4b2a6a75c618aed91bd85a132be9fc92

    • SSDEEP

      24576:GbhVoNWbA1m6z1hGaMopv3RdaK6IPFf0DtDN9Tox0gc:vtQZPTtgc

    Score
    1/10
    • Target

      1 NOTIFICACION DEMANDA/vcl120.bpl

    • Size

      1.9MB

    • MD5

      c594d746ff6c99d140b5e8da97f12fd4

    • SHA1

      f21742707c5f3fee776f98641f36bd755e24a7b0

    • SHA256

      572edb7d630e9b03f93bd15135d2ca360176c1232051293663ec5b75c2428aec

    • SHA512

      33b9902b2cf1154d850779cd012c0285882e158b9d1422c54ea9400ca348686773b6bacb760171060d1a0e620f8ff4a26ecd889dea3c454e8fc5fa59b173832b

    • SSDEEP

      24576:j2gekcIlYas4GaAKBTZTkZbJ7YBRSjr2WLPcgjzTGlyz6F:jRvzfZT3XSmqcOTGc+F

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks