asyncrat | c21d1dd6391ae93398507c94f9b075dbe8baceed4903a78b3f6bebfa85cd155e | Triage

Sharing

General

Target

0x000e000000015cb1-161.dat
Size

45KB
Sample

240319-elcxrsgh34
MD5

310b982faa6a9c8473c6a6097a64317f
SHA1

abdc0ee76d9f21d318c04b12cbbb4453c18a4c57
SHA256

c21d1dd6391ae93398507c94f9b075dbe8baceed4903a78b3f6bebfa85cd155e
SHA512

e9434ff38d01f8983febbd7a4cafeaa4b2f11166adee44a4f6e10a9c25c265e0cefbe7c7a43dd38a3c77bdebdf662e98311184595e52419c03666658a0a4cb8c
SSDEEP

768:huyRNTAoZjRWUJs9bmo2qLxAuXuPeD58vnPIM9zjbggX36PV/n8vvmv4Rk4oTeBf:huyRNTAGo2Ju7D5iAM93bHXK9/n8mQRL

Score

10^/10

asyncrat kz1 rat

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

KZ1

C2

77.232.132.25:5001

Mutex

AsyncMutex_6SI8OJU68

Attributes

delay
3
install
false
install_file
service.exe
install_folder
%AppData%

aes.plain

Targets

- Target
  
  0x000e000000015cb1-161.dat
- Size
  
  45KB
- MD5
  
  310b982faa6a9c8473c6a6097a64317f
- SHA1
  
  abdc0ee76d9f21d318c04b12cbbb4453c18a4c57
- SHA256
  
  c21d1dd6391ae93398507c94f9b075dbe8baceed4903a78b3f6bebfa85cd155e
- SHA512
  
  e9434ff38d01f8983febbd7a4cafeaa4b2f11166adee44a4f6e10a9c25c265e0cefbe7c7a43dd38a3c77bdebdf662e98311184595e52419c03666658a0a4cb8c
- SSDEEP
  
  768:huyRNTAoZjRWUJs9bmo2qLxAuXuPeD58vnPIM9zjbggX36PV/n8vvmv4Rk4oTeBf:huyRNTAGo2Ju7D5iAM93bHXK9/n8mQRL
Score

10^/10

asyncrat kz1 rat
- AsyncRat
  AsyncRAT is designed to remotely monitor and control other computers written in C#.
  rat asyncrat
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2