Overview

overview

10

Static

static

1

712940BAEF...52.exe

windows7-x64

10

712940BAEF...52.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    712940BAEF78C821E36B8701BF073C52.exe
  • Size 91KB
  • Sample240419-lmax5adh82
  • SHA256 08f8498aec75418bb4c12972a6547ee2c4762160e7bf36c558a91b7b9110ed3f
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

  • asyncrat

Version

  • 0.5.8 - Customized by Mikewaals

Botnet

  • Default

C2

  • 204.12.199.30:6606

  • 204.12.199.30:7707

  • 204.12.199.30:8808

Mutex

  • Bbtt03i3Zbxo

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target
      712940BAEF78C821E36B8701BF073C52.exe
    • Size 91KB
    • SHA256 08f8498aec75418bb4c12972a6547ee2c4762160e7bf36c558a91b7b9110ed3f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Downloads MZ/PE file

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks