Overview

overview

10

Static

static

10

a ton of c...0).exe

windows10-1703-x64

10

a ton of c...1).exe

windows10-1703-x64

10

a ton of c...2).exe

windows10-1703-x64

10

a ton of c...3).exe

windows10-1703-x64

10

a ton of c...4).exe

windows10-1703-x64

10

a ton of c...5).exe

windows10-1703-x64

10

a ton of c...6).exe

windows10-1703-x64

10

a ton of c...7).exe

windows10-1703-x64

10

a ton of c...8).exe

windows10-1703-x64

10

a ton of c...9).exe

windows10-1703-x64

10

a ton of c...2).exe

windows10-1703-x64

10

a ton of c...0).exe

windows10-1703-x64

10

a ton of c...1).exe

windows10-1703-x64

10

a ton of c...2).exe

windows10-1703-x64

10

a ton of c...3).exe

windows10-1703-x64

10

a ton of c...4).exe

windows10-1703-x64

10

a ton of c...5).exe

windows10-1703-x64

10

a ton of c...6).exe

windows10-1703-x64

10

a ton of c...7).exe

windows10-1703-x64

10

a ton of c...8).exe

windows10-1703-x64

10

a ton of c...9).exe

windows10-1703-x64

10

a ton of c...3).exe

windows10-1703-x64

10

a ton of c...0).exe

windows10-1703-x64

10

a ton of c...1).exe

windows10-1703-x64

10

a ton of c...4).exe

windows10-1703-x64

10

a ton of c...5).exe

windows10-1703-x64

10

a ton of c...6).exe

windows10-1703-x64

10

a ton of c...7).exe

windows10-1703-x64

10

a ton of c...8).exe

windows10-1703-x64

10

a ton of c...9).exe

windows10-1703-x64

10

a ton of c...py.exe

windows10-1703-x64

10

a ton of c...me.exe

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    a ton of cumme.zip
  • Size 978KB
  • Sample240503-b4lqvaea67
  • SHA256 747957c357cf6fbb4507831926d64211bcea32f767e4262efe275bba99154089
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

  • asyncrat

Botnet

  • Default

C2

  • other-fellow.gl.at.ply.gg:42571

Attributes
  • delay

    1

  • install

    true

  • install_file

    cumme.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target
      a ton of cumme/cumme - Copy (10).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral1
    • Target
      a ton of cumme/cumme - Copy (11).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral2
    • Target
      a ton of cumme/cumme - Copy (12).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral3
    • Target
      a ton of cumme/cumme - Copy (13).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral4
    • Target
      a ton of cumme/cumme - Copy (14).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral5
    • Target
      a ton of cumme/cumme - Copy (15).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral6
    • Target
      a ton of cumme/cumme - Copy (16).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral7
    • Target
      a ton of cumme/cumme - Copy (17).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral8
    • Target
      a ton of cumme/cumme - Copy (18).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral9
    • Target
      a ton of cumme/cumme - Copy (19).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral10
    • Target
      a ton of cumme/cumme - Copy (2).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral11
    • Target
      a ton of cumme/cumme - Copy (20).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral12
    • Target
      a ton of cumme/cumme - Copy (21).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral13
    • Target
      a ton of cumme/cumme - Copy (22).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral14
    • Target
      a ton of cumme/cumme - Copy (23).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral15
    • Target
      a ton of cumme/cumme - Copy (24).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral16
    • Target
      a ton of cumme/cumme - Copy (25).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral17
    • Target
      a ton of cumme/cumme - Copy (26).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral18
    • Target
      a ton of cumme/cumme - Copy (27).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral19
    • Target
      a ton of cumme/cumme - Copy (28).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral20
    • Target
      a ton of cumme/cumme - Copy (29).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral21
    • Target
      a ton of cumme/cumme - Copy (3).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral22
    • Target
      a ton of cumme/cumme - Copy (30).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral23
    • Target
      a ton of cumme/cumme - Copy (31).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral24
    • Target
      a ton of cumme/cumme - Copy (4).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral25
    • Target
      a ton of cumme/cumme - Copy (5).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral26
    • Target
      a ton of cumme/cumme - Copy (6).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral27
    • Target
      a ton of cumme/cumme - Copy (7).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral28
    • Target
      a ton of cumme/cumme - Copy (8).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral29
    • Target
      a ton of cumme/cumme - Copy (9).exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral30
    • Target
      a ton of cumme/cumme - Copy.exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral31
    • Target
      a ton of cumme/cumme.exe
    • Size 63KB
    • SHA256 390f2329d720595861f5bc5bf65cccdd0a76639197f15fb1529e66736a6f6a41
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

ratdefaultasyncrat
Score
10/10

behavioral1

asyncratdefaultrat
Score
10/10

behavioral2

asyncratdefaultrat
Score
10/10

behavioral3

asyncratdefaultrat
Score
10/10

behavioral4

asyncratdefaultrat
Score
10/10

behavioral5

asyncratdefaultrat
Score
10/10

behavioral6

asyncratdefaultrat
Score
10/10

behavioral7

asyncratdefaultrat
Score
10/10

behavioral8

asyncratdefaultrat
Score
10/10

behavioral9

asyncratdefaultrat
Score
10/10

behavioral10

asyncratdefaultrat
Score
10/10

behavioral11

asyncratdefaultrat
Score
10/10

behavioral12

asyncratdefaultrat
Score
10/10

behavioral13

asyncratdefaultrat
Score
10/10

behavioral14

asyncratdefaultrat
Score
10/10

behavioral15

asyncratdefaultrat
Score
10/10

behavioral16

asyncratdefaultrat
Score
10/10

behavioral17

asyncratdefaultrat
Score
10/10

behavioral18

asyncratdefaultrat
Score
10/10

behavioral19

asyncratdefaultrat
Score
10/10

behavioral20

asyncratdefaultrat
Score
10/10

behavioral21

asyncratdefaultrat
Score
10/10

behavioral22

asyncratdefaultrat
Score
10/10

behavioral23

asyncratdefaultrat
Score
10/10

behavioral24

asyncratdefaultrat
Score
10/10

behavioral25

asyncratdefaultrat
Score
10/10

behavioral26

asyncratdefaultrat
Score
10/10

behavioral27

asyncratdefaultrat
Score
10/10

behavioral28

asyncratdefaultrat
Score
10/10

behavioral29

asyncratdefaultrat
Score
10/10

behavioral30

asyncratdefaultrat
Score
10/10

behavioral31

asyncratdefaultrat
Score
10/10

behavioral32

asyncratdefaultrat
Score
10/10