General

  • Target

    https://github.com/ASY333/TikTok-ViewBot-main

  • Sample

    240213-d99e7sgg7t

Malware Config

Targets

    • Target

      https://github.com/ASY333/TikTok-ViewBot-main

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks