Overview

overview

10

Static

static

3

Vortex.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Vortex.exe

  • Size

    69KB

  • Sample

    240307-jvd9eagd7s

  • MD5

    a9746e20d6276fc0098baa56649ea397

  • SHA1

    80b609c3a65a05c4d66aac17e7ac099f43ebb33d

  • SHA256

    e1707d88a192d331ef4c36b799eb031c2e9c2da0a1ca8d146325d81131c3831d

  • SHA512

    bce4b9c7277134141643e2807649267c3dcbe7c758bf95b03443d42de72ac2b1e7f942b2e911edb1345561f1965aa379ac0e1b0686a77a390f482f246539f757

  • SSDEEP

    1536:gtKenoOUux9mNYft3t3K5eKuiRC7MZn+RSQX9v:BenrUQm2ft5f5iCMt+gQX9v

Score
10/10
asyncrat1rat

Malware Config

Extracted

Family

asyncrat

Botnet

1

C2

127.0.0.1:5555

127.0.0.1:23

192.168.86.217:5555

192.168.86.217:23
Mutex

ZبHg迪贼德txE伊GNWlΖqΘX

Attributes
  • delay

    1

  • install

    true

  • install_file

    1.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Vortex.exe

    • Size

      69KB

    • MD5

      a9746e20d6276fc0098baa56649ea397

    • SHA1

      80b609c3a65a05c4d66aac17e7ac099f43ebb33d

    • SHA256

      e1707d88a192d331ef4c36b799eb031c2e9c2da0a1ca8d146325d81131c3831d

    • SHA512

      bce4b9c7277134141643e2807649267c3dcbe7c758bf95b03443d42de72ac2b1e7f942b2e911edb1345561f1965aa379ac0e1b0686a77a390f482f246539f757

    • SSDEEP

      1536:gtKenoOUux9mNYft3t3K5eKuiRC7MZn+RSQX9v:BenrUQm2ft5f5iCMt+gQX9v

    Score
    10/10
    asyncrat1rat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Scheduled Task/Job

1
T1053

Persistence

Scheduled Task/Job

1
T1053

Privilege Escalation

Scheduled Task/Job

1
T1053

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks