Resubmissions

04/05/2024, 10:29

240504-mjf6eabb9110

04/05/2024, 09:56

240504-lysmbaae8y10

General

  • Target
    Vulcan1.5 BETA.zip
  • Size 6.3MB
  • Sample240504-mjf6eabb91
  • SHA256 c89e2b54f3c5d87685524102f4a03430e99d41ff6541c99e97b379ab7f5a413c
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • asyncrat

Botnet
  • Default

C2
  • 127.0.0.1:3232

  • 192.168.0.194:3232

Attributes
  • delay

    4

  • install

    true

  • install_file

    sys1.exe

  • install_folder

    %Temp%

aes.plain

Targets

    • Target
      Vulcan1.5 BETA/CED3D10Hook.dll
    • Size 128KB
    • SHA256 148f12445f11a50efbd23509139bf06a47d453e8514733b5a15868d10cc6e066
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Vulcan1.5 BETA/CED3D10Hook64.dll
    • Size 140KB
    • SHA256 a2ac2ba27b0ed9acc3f0ea1bef9909a59169bc2eb16c979ef8e736a784bf2fa4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Vulcan1.5 BETA/CED3D11Hook.dll
    • Size 137KB
    • SHA256 1e30126badfffb231a605c6764dd98895208779ef440ea20015ab560263dd288
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Vulcan1.5 BETA/CED3D11Hook64.dll
    • Size 146KB
    • SHA256 6f505cc5973687bbda1c2d9ac8a635d333f57c12067c54da7453d9448ab40b8f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Vulcan1.5 BETA/FPS Fixer.exe
    • Size 509KB
    • SHA256 9491b1c563b349ab1c9bc2b8dc76f08019462518ecb6d84bdd2060a7b37f9eac
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Vulcan1.5 BETA/Vulcan1.5.exe
    • Size 78KB
    • SHA256 73daf4be0b78f20916eb75bdcf49c55445f24d6966ebb63e27fee354dc670d52
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Target
      Vulcan1.5 BETA/autorun/AddToNewGroup.LUA
    • Size 1KB
    • SHA256 87fa0d759d6b36cba2b5cb0a8c5c3c43312b0ee6f03e077c4ad6b9f748c5f8b0
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Vulcan1.5 BETA/autorun/DotNetInterface.lua
    • Size 19KB
    • SHA256 952bc6a8bfd0070566411ee88ca84f5a7f54c452a4e77790c84cb150595a443b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Vulcan1.5 BETA/autorun/JavaInfo.lua
    • Size 28KB
    • SHA256 aa530743076cac31f77260beac32b9e0e5b6983c2b3cbc8f348d8abf4f0c9c3b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Vulcan1.5 BETA/autorun/JavaSearch.lua
    • Size 5KB
    • SHA256 8af39e86394f7b56023753ca517bfdca29dc4f3dfe64a3310eafc21207a61e95
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Vulcan1.5 BETA/autorun/MethodInvokeDialog.lua
    • Size 5KB
    • SHA256 eef6cfa2400ab5d1b4c59bbf3bdc977d5600ee07c3edc068de84b16eb48442dd
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Vulcan1.5 BETA/autorun/andtools.lua
    • Size 7KB
    • SHA256 1142b59d9b5a918b637006fbcd7199c3d561ce08722ecaf192fbf2bcb9b0c3f1
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Vulcan1.5 BETA/autorun/autosave.LUA
    • Size 8KB
    • SHA256 2102c2a017fe0c15d924891750f2108734c1f616bb8155db075109e4368a931e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Vulcan1.5 BETA/autorun/babyce.lua
    • Size 14KB
    • SHA256 1a0af003b24d7af4aac1da4f635dc2654b909ea4e377aa7f8100e1423fe56156
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Vulcan1.5 BETA/autorun/bigendian.lua
    • Size 7KB
    • SHA256 ec62e56280d04a8abf6bd1261991a505b2e5901082d8e41c9a6a15592cc9ac27
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Vulcan1.5 BETA/autorun/ceshare.lua
    • Size 13KB
    • SHA256 c0a7ad4fd5bc521b04fea71e9d1023d9e36f88bb8f6a53e4e8e014923de4c7d9
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

ratdefaultasyncrat
Score
10/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

asyncratdefaultrat
Score
10/10

behavioral12

asyncratdefaultrat
Score
10/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10