General

  • Target

    7e751cd05fcab1de431086f8717746cc

  • Size

    222KB

  • Sample

    240129-bbp8kafhhn

  • MD5

    7e751cd05fcab1de431086f8717746cc

  • SHA1

    437996d5eec7f5fafa6e716dd0386dbadcc2adeb

  • SHA256

    0ce2fb2bc081226803c1b3f806f55107f79b35adf03ec75a1d6491ded7508448

  • SHA512

    3fefcc470ef1438c77c88d94b6eae86051744c3fe2b866dd9116ed649d5421c11759dad7f5a0c4008324a37af88f7f0fb20a1adba11d1c348aa0acb79788607d

  • SSDEEP

    1536:mcYQSNS8xyAFKdafDD/Q9mnTn2IHuzeNAUGOAD5J+HP41AykDrNo1LF54I3OHLbI:qZZZf3JT2ne5GLVJ+HP41Ayk6

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

clayroot2016.linkpc.net:6666

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      7e751cd05fcab1de431086f8717746cc

    • Size

      222KB

    • MD5

      7e751cd05fcab1de431086f8717746cc

    • SHA1

      437996d5eec7f5fafa6e716dd0386dbadcc2adeb

    • SHA256

      0ce2fb2bc081226803c1b3f806f55107f79b35adf03ec75a1d6491ded7508448

    • SHA512

      3fefcc470ef1438c77c88d94b6eae86051744c3fe2b866dd9116ed649d5421c11759dad7f5a0c4008324a37af88f7f0fb20a1adba11d1c348aa0acb79788607d

    • SSDEEP

      1536:mcYQSNS8xyAFKdafDD/Q9mnTn2IHuzeNAUGOAD5J+HP41AykDrNo1LF54I3OHLbI:qZZZf3JT2ne5GLVJ+HP41Ayk6

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks