Resubmissions
24/04/2024, 00:46
240424-a4w15sdb7x824/04/2024, 00:35
240424-axrsvada91824/04/2024, 00:19
240424-amc7psda75524/04/2024, 00:07
240424-aeq4lada341023/04/2024, 23:48
240423-3tt31sch5x823/04/2024, 23:40
240423-3ns9jach4y823/04/2024, 23:34
240423-3kkg8ach58123/04/2024, 23:30
240423-3hmjssch3510General
- Target https://cdn.discordapp.com/attachments/1216886003416043670/1232473708787011605/lmg_MlaKaifa2333_4k.zip?ex=66299616&is=66284496&hm=44c6f341634904e6a58b537f456b31c6d84ca5b66f6004148b5ed79f9480b40a&
- Sample240424-aeq4lada34
Score
10/10
Malware Config
Extracted
Family
-
asyncrat
Version
-
1.0.7
Botnet
-
ADFLYYYY
C2
-
139.99.133.66:6666
Mutex
-
acwwcawwacwvasasa
Attributes
-
delay
1
-
install
false
-
install_folder
%AppData%
aes.plain
Targets
-
- Target https://cdn.discordapp.com/attachments/1216886003416043670/1232473708787011605/lmg_MlaKaifa2333_4k.zip?ex=66299616&is=66284496&hm=44c6f341634904e6a58b537f456b31c6d84ca5b66f6004148b5ed79f9480b40a&
Score10/10-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Loads dropped DLL
-
Registers COM server for autorun
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext