General

  • Target

    2f68383cfc9cc7c1db7afd6bdf2b81c224d79b3262e986e40a6b6fe8729d70fe

  • Size

    15.8MB

  • Sample

    240522-jrqg9sgh91

  • MD5

    73572eb5b030fd9b674de7d6152341d5

  • SHA1

    096f5088b9153a84471b80432762b1f14041e8ff

  • SHA256

    2f68383cfc9cc7c1db7afd6bdf2b81c224d79b3262e986e40a6b6fe8729d70fe

  • SHA512

    ab4e29cd062d850e4c009e83f1d862d82659f2bcfa03fbf69827d4da6c9377cc5d42dffa531b09c17116c84dc1fa8d35598a740159ce537460b39ef565577c1c

  • SSDEEP

    196608:nTq2VCjPIGxjNaN+hn0k0iIoy/FG+Xcni0iivr00E5GqJd5M0cM/gVqsWUOMzn0e:3pGxpz0KIoyv5o0Ii9cgsWUOMr0Kl

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

2.0.0

Botnet

Default

C2

webwhatsapp.cc:65503

Mutex

ShiningForceRatMutex_cs_cs_cs

Attributes
  • delay

    1

  • install

    false

  • install_file

    qweq.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      2f68383cfc9cc7c1db7afd6bdf2b81c224d79b3262e986e40a6b6fe8729d70fe

    • Size

      15.8MB

    • MD5

      73572eb5b030fd9b674de7d6152341d5

    • SHA1

      096f5088b9153a84471b80432762b1f14041e8ff

    • SHA256

      2f68383cfc9cc7c1db7afd6bdf2b81c224d79b3262e986e40a6b6fe8729d70fe

    • SHA512

      ab4e29cd062d850e4c009e83f1d862d82659f2bcfa03fbf69827d4da6c9377cc5d42dffa531b09c17116c84dc1fa8d35598a740159ce537460b39ef565577c1c

    • SSDEEP

      196608:nTq2VCjPIGxjNaN+hn0k0iIoy/FG+Xcni0iivr00E5GqJd5M0cM/gVqsWUOMzn0e:3pGxpz0KIoyv5o0Ii9cgsWUOMr0Kl

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

MITRE ATT&CK Matrix

Tasks