Overview

overview

10

Static

static

1

deliverable.html

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    deliverable

  • Size

    102KB

  • Sample

    240425-w14gpsdd3w

  • MD5

    2c54896711f42eee6a5d723ba3cd9367

  • SHA1

    b1cb25c806d52ad6bc75f59f84c47e35f05e7373

  • SHA256

    7a47b20b76b60679c02f127d0f1b6cafdd96916f8bc33a812c96368e7295331b

  • SHA512

    de43895cca7523dfbf53244cfd055621fbe932b861ee5117f79f40491921cfc032f452e746c10a39e633507dd00623a5b361f911b13a19da6963a8b8bbab95df

  • SSDEEP

    768:1603LBrePKG3Aiock+wssfexjs8cfzXX/bCbhbEpXLaR/9tG5A/YcLlViRVn8nva:1UxjsNfWdbEYR/mqyUvW/

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Botnet

Default

Attributes
  • delay

    1

  • install

    true

  • install_file

    svchost.exe

  • install_folder

    %AppData%

  • pastebin_config

    https://pastebin.com/raw/z5PQ82wE

aes.plain

Targets

    • Target

      deliverable

    • Size

      102KB

    • MD5

      2c54896711f42eee6a5d723ba3cd9367

    • SHA1

      b1cb25c806d52ad6bc75f59f84c47e35f05e7373

    • SHA256

      7a47b20b76b60679c02f127d0f1b6cafdd96916f8bc33a812c96368e7295331b

    • SHA512

      de43895cca7523dfbf53244cfd055621fbe932b861ee5117f79f40491921cfc032f452e746c10a39e633507dd00623a5b361f911b13a19da6963a8b8bbab95df

    • SSDEEP

      768:1603LBrePKG3Aiock+wssfexjs8cfzXX/bCbhbEpXLaR/9tG5A/YcLlViRVn8nva:1UxjsNfWdbEYR/mqyUvW/

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Scheduled Task/Job

1
T1053

Persistence

Scheduled Task/Job

1
T1053

Privilege Escalation

Scheduled Task/Job

1
T1053

Defense Evasion

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

2
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Resource Development

Reconnaissance

Tasks