General

  • Target

    https://gofile.io/d/MavGTt

  • Sample

    240313-rb5k9aee6s

Malware Config

Extracted

Family

asyncrat

Botnet

PornHubNation1337

C2

192.168.43.84:1337

192.168.142.1:1337

192.168.56.1:1337

Mutex

ωابB5m贼vS吉7רר吉aΒi德i7

Attributes
  • delay

    1

  • install

    true

  • install_file

    EasyWooFeR.exe

  • install_folder

    %Temp%

aes.plain

Targets

    • Target

      https://gofile.io/d/MavGTt

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks