Overview

overview

10

Static

static

1

7343432-no...al.svg

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7343432-notificacionjudicial.svg

  • Size

    231KB

  • Sample

    240527-z4d8rsbd74

  • MD5

    d68b5a4fa2a3210f89c9bf52d8409318

  • SHA1

    1e1882dda88aa19d1d263991caa57ca79657a755

  • SHA256

    1e3979d185a83d12f2e2463effc3124c1609a5357315ac65d745fd3471158343

  • SHA512

    904f4b0ea332452d13b94dfefdf45bfcebcab64fa4fa25a50dd9768c1222ab07b3693458051202d9e89b8e95e15bee25dee4563e9a2baec5030f94f9ed8665f0

  • SSDEEP

    3072:iEc6unu1AD5AfADsACAfA0AIzuku3Ku9uXu712gqzYPeusYuVuPuJuvuobuJunuy:9uW

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

| CRACKED BY https://t.me/xworm_v2

Botnet

Default

C2

briana2024.kozow.com:5050

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      7343432-notificacionjudicial.svg

    • Size

      231KB

    • MD5

      d68b5a4fa2a3210f89c9bf52d8409318

    • SHA1

      1e1882dda88aa19d1d263991caa57ca79657a755

    • SHA256

      1e3979d185a83d12f2e2463effc3124c1609a5357315ac65d745fd3471158343

    • SHA512

      904f4b0ea332452d13b94dfefdf45bfcebcab64fa4fa25a50dd9768c1222ab07b3693458051202d9e89b8e95e15bee25dee4563e9a2baec5030f94f9ed8665f0

    • SSDEEP

      3072:iEc6unu1AD5AfADsACAfA0AIzuku3Ku9uXu712gqzYPeusYuVuPuJuvuobuJunuy:9uW

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks