General

  • Target

    0b72d9b98a14810527f555cad408e756.bin

  • Size

    59KB

  • Sample

    240427-bcyakafe78

  • MD5

    04f07dc76d86cfc60c0e157ca1aa207c

  • SHA1

    ee8a2819774bcde5002f04aec9f384de53404e2e

  • SHA256

    dc64c9bc55607a5859e25422c1404f384b333db3f19229cdbcb0e8c5939eeea0

  • SHA512

    60e5914a14cac1964d2c9d05a93edad83dbe638fe03a3a7349f1119838b2cbb586bec7a4450ef8585596e44b0c14087eacdbf3ceb19aab5e1d599b71930b304c

  • SSDEEP

    1536:TVohApqaG4FiPMHzKclHWmexghQ5LwR2E+b6:xpqvMHzKcwmexuQ02EU6

Score
10/10

Malware Config

Extracted

Family

asyncrat

Botnet

Default

C2

dcxwq1.duckdns.org:3232

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      fc1c119af2b10c067771cf36170a8b4ac28db714d14cde45a96b4807d654ded5.cmd

    • Size

      82KB

    • MD5

      0b72d9b98a14810527f555cad408e756

    • SHA1

      e24969bea50bebde5905068c993324fae2470ac6

    • SHA256

      fc1c119af2b10c067771cf36170a8b4ac28db714d14cde45a96b4807d654ded5

    • SHA512

      acb4399d53b0b29a23ef04cfae67069a03a115a3da5af22587ba1c47193bc6bad892cdfc90818421658749c68cb90a7dd9436bc507e150dd4db835d7bccf81ce

    • SSDEEP

      1536:oGr7JprjygfWS26G0KbG/9CHHJxPFg2Ta9bt3nliqnOh991geWFY4dAvGyMryXAV:oy77jwS2X0mG/9upxtg2A3nYt1vHGPTV

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

MITRE ATT&CK Matrix

Tasks