General

  • Target

    4516D516DCF02B03D700312E4AF2B58F.exe

  • Size

    91KB

  • Sample

    240524-hmgtwsgh75

  • MD5

    4516d516dcf02b03d700312e4af2b58f

  • SHA1

    8a36bd779bfba8a87b5d8ee8e6c0d7c0a4faa3ca

  • SHA256

    b010fc8a5324e8c3f72bd5884f5f31cbc02dcb9df573cf5a82405560f4927687

  • SHA512

    0709c4069670d24c96d32f47fbf8a0eb0b3484cdce07205f5d2640b9b852fa8d0b1fda1b93d2858062ad76c44778cbc68ee831f3919e82422197c64e9a698f39

  • SSDEEP

    1536:rMuBw+olasjN0Fu8MmiGRwOFSe4808VxdHDYIEgr69cmoLu0t0H:rMuBwsshLW/j4v8PdHsX9cmoLu0Y

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

OP

C2

20.117.108.240:5612

Mutex

HssS7dvHeccj

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      4516D516DCF02B03D700312E4AF2B58F.exe

    • Size

      91KB

    • MD5

      4516d516dcf02b03d700312e4af2b58f

    • SHA1

      8a36bd779bfba8a87b5d8ee8e6c0d7c0a4faa3ca

    • SHA256

      b010fc8a5324e8c3f72bd5884f5f31cbc02dcb9df573cf5a82405560f4927687

    • SHA512

      0709c4069670d24c96d32f47fbf8a0eb0b3484cdce07205f5d2640b9b852fa8d0b1fda1b93d2858062ad76c44778cbc68ee831f3919e82422197c64e9a698f39

    • SSDEEP

      1536:rMuBw+olasjN0Fu8MmiGRwOFSe4808VxdHDYIEgr69cmoLu0t0H:rMuBwsshLW/j4v8PdHsX9cmoLu0Y

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks