General

  • Target

    4f15dbd35b4c2bc82837a910ca1700d0_NeikiAnalytics.exe

  • Size

    47KB

  • Sample

    240529-ldrjhsaa5x

  • MD5

    4f15dbd35b4c2bc82837a910ca1700d0

  • SHA1

    3ef53da1ba5e57b7c4d6b14d411b6d8684636bb3

  • SHA256

    8a027f9a74ba1cef5243f3fe7c88c5ae4afe4068076ec204e03357964a02f95b

  • SHA512

    43b13e4d0e4b1a7838c46b32fc73631a02483be5e88d71ffb4680e164af94385002426a36e2f76deb7037471408628b058a675b8ba69face378ad4e79c983ac1

  • SSDEEP

    768:bq+s3pUtDILNCCa+DikFZdgrcqis+8YbLgeEKEa04SvEgK/J3ZVc6KN:bq+AGtQOkirUzb0C4nkJ3ZVclN

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

KGG11

C2

4Mekey.myftp.biz:8848

Mutex

DcRatMutex_qwqdanchun

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      4f15dbd35b4c2bc82837a910ca1700d0_NeikiAnalytics.exe

    • Size

      47KB

    • MD5

      4f15dbd35b4c2bc82837a910ca1700d0

    • SHA1

      3ef53da1ba5e57b7c4d6b14d411b6d8684636bb3

    • SHA256

      8a027f9a74ba1cef5243f3fe7c88c5ae4afe4068076ec204e03357964a02f95b

    • SHA512

      43b13e4d0e4b1a7838c46b32fc73631a02483be5e88d71ffb4680e164af94385002426a36e2f76deb7037471408628b058a675b8ba69face378ad4e79c983ac1

    • SSDEEP

      768:bq+s3pUtDILNCCa+DikFZdgrcqis+8YbLgeEKEa04SvEgK/J3ZVc6KN:bq+AGtQOkirUzb0C4nkJ3ZVclN

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

MITRE ATT&CK Matrix

Tasks