Overview

overview

10

Static

static

1

5 NOTIFICA......exe

windows7-x64

10

5 NOTIFICA......exe

windows10-2004-x64

10

5 NOTIFICA...er.dll

windows7-x64

1

5 NOTIFICA...er.dll

windows10-2004-x64

1

5 NOTIFICA...20.dll

windows7-x64

1

5 NOTIFICA...20.dll

windows10-2004-x64

1

5 NOTIFICA...20.dll

windows7-x64

1

5 NOTIFICA...20.dll

windows10-2004-x64

1

Resubmissions

30-04-2024 15:51

240430-tamp6aad4v 10

30-04-2024 15:48

240430-s8w6taac8v 1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5 NOTIFICACION DEMANDA.zip

  • Size

    2.2MB

  • Sample

    240430-tamp6aad4v

  • MD5

    4838747f0d61fbccfc4ce7fa88e7605c

  • SHA1

    767da8e61a2e9dbbef702f3a389393f474e287a6

  • SHA256

    34cef105cd8ee43da90df59fb3e7c0e257330240eea2faa4d37893b8e0d13ba5

  • SHA512

    63ef013882e73242a22b54721c8fdf0e046bb63240d2172a1dfdc036d9cd7bb542a7d424eed0f0617058ad74e7ce199c135527d59c6efeac9057faca637593d2

  • SSDEEP

    49152:RJc31aLhsh9fYdMBlsiY+y8HfJSN386rzcPl:HWhdDXzYBGBS5trs

Score
10/10
asyncrattrackmoneyrat

Malware Config

Extracted

Family

asyncrat

Version

| Edit 3LOSH RAT

Botnet

TRACKMONEY

C2

trackmoney.dynuddns.net:5959

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      5 NOTIFICACION DEMANDA/5 NOTIFICACION DEMANDA...exe

    • Size

      135KB

    • MD5

      a2d70fbab5181a509369d96b682fc641

    • SHA1

      22afcdc180400c4d2b9e5a6db2b8a26bff54dd38

    • SHA256

      8aed681ad8d660257c10d2f0e85ae673184055a341901643f27afc38e5ef8473

    • SHA512

      219c6e7e88004fad9f4392be9a852c58fc43b7f6900e40370991427f37eaea5c18f48d2954f9479dde8bcb787345f4e292d5620add8224aec4d93d7968820b83

    • SSDEEP

      1536:URLRDTAC1CMoR1CqabJWt7AQFYMGhw1ScCD28v2Vv428fmvxOuw03h9VC:URdV1CMoiqadTQFBGhw1ED28+94hGw

    Score
    10/10
    asyncrattrackmoneyrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      5 NOTIFICACION DEMANDA/Register.dll

    • Size

      1.0MB

    • MD5

      dd001e7a2f751f6c9e8c40e23307d102

    • SHA1

      22fdeab3d891334e2e27d970b3a5680d45cb3371

    • SHA256

      e2b66236119bfea1571f423a721b1c4495b2363a0af83b8ec2ea728b4fdd7d7a

    • SHA512

      ee9591e952028aab264ed6fa51369bb5c8d7aee4eaf735fd2f78b4559e2d07791d4d9777478d93be9de8952fa70105d9c431a48d380eebe637138fa188d7aae7

    • SSDEEP

      24576:a0RdvjwJ4ZCWQufs54Quz27j7BS2Nv+4BT8+uCI:bDhTzAj7pXT3S

    Score
    1/10
    behavioral3behavioral4

    • Target

      5 NOTIFICACION DEMANDA/rtl120.bpl

    • Size

      1.1MB

    • MD5

      adf82ed333fb5567f8097c7235b0e17f

    • SHA1

      e6ccaf016fc45edcdadeb40da64c207ddb33859f

    • SHA256

      d6dd7a4f46f2cfde9c4eb9463b79d5ff90fc690da14672ba1da39708ee1b9b50

    • SHA512

      2253c7b51317a3b5734025b6c7639105dbc81c340703718d679a00c13d40dd74ccaba1f6d04b21ee440f19e82ba680aa4b2a6a75c618aed91bd85a132be9fc92

    • SSDEEP

      24576:GbhVoNWbA1m6z1hGaMopv3RdaK6IPFf0DtDN9Tox0gc:vtQZPTtgc

    Score
    1/10
    behavioral5behavioral6

    • Target

      5 NOTIFICACION DEMANDA/vcl120.bpl

    • Size

      1.9MB

    • MD5

      c594d746ff6c99d140b5e8da97f12fd4

    • SHA1

      f21742707c5f3fee776f98641f36bd755e24a7b0

    • SHA256

      572edb7d630e9b03f93bd15135d2ca360176c1232051293663ec5b75c2428aec

    • SHA512

      33b9902b2cf1154d850779cd012c0285882e158b9d1422c54ea9400ca348686773b6bacb760171060d1a0e620f8ff4a26ecd889dea3c454e8fc5fa59b173832b

    • SSDEEP

      24576:j2gekcIlYas4GaAKBTZTkZbJ7YBRSjr2WLPcgjzTGlyz6F:jRvzfZT3XSmqcOTGc+F

    Score
    1/10
    behavioral7behavioral8

MITRE ATT&CK Enterprise v15

Tasks