Overview

overview

10

Static

static

3

68e5cd49f6...18.exe

windows7-x64

10

68e5cd49f6...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    68e5cd49f6d77354d46b27a1e6e7763e_JaffaCakes118

  • Size

    4.9MB

  • Sample

    240522-2q95dsbh8s

  • MD5

    68e5cd49f6d77354d46b27a1e6e7763e

  • SHA1

    c2cb1378e9ede29c9a96c46f8ea1c5aaeffa26f1

  • SHA256

    7e18d8d15774617c68ee110c9db48ede24e1a4a28c52fb8197dfc593ed2877b0

  • SHA512

    12bbd1ff695a6d91692970c6882e17a5493b27bd931168e619931af4c51c4f0621ed5ae5a53e605e26bbfedf0c8b812be6b39854209569af860090e61680031f

  • SSDEEP

    98304:tZY+5StaPLB6cdAT88El9DkLry6Dgbe8AONOuLFP3TgFge:ttvBX+4PzkL5Dgi8AoDpTkge

Score
10/10
asyncratrat

Malware Config

Targets

    • Target

      68e5cd49f6d77354d46b27a1e6e7763e_JaffaCakes118

    • Size

      4.9MB

    • MD5

      68e5cd49f6d77354d46b27a1e6e7763e

    • SHA1

      c2cb1378e9ede29c9a96c46f8ea1c5aaeffa26f1

    • SHA256

      7e18d8d15774617c68ee110c9db48ede24e1a4a28c52fb8197dfc593ed2877b0

    • SHA512

      12bbd1ff695a6d91692970c6882e17a5493b27bd931168e619931af4c51c4f0621ed5ae5a53e605e26bbfedf0c8b812be6b39854209569af860090e61680031f

    • SSDEEP

      98304:tZY+5StaPLB6cdAT88El9DkLry6Dgbe8AONOuLFP3TgFge:ttvBX+4PzkL5Dgi8AoDpTkge

    Score
    10/10
    asyncratrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks