General

  • Target

    test.exe

  • Size

    63KB

  • Sample

    240604-ewd8kscg4x

  • MD5

    b3d01bc6330dc1f960e0a3b28fd6c7d2

  • SHA1

    c1bf78d5be2b0db5074d3a6bd588d42e7984561d

  • SHA256

    91d3ab6c2704b6471a45e0d5dd3537acd3058656d6f9b9c8194946974d8079a1

  • SHA512

    959c24e5a03a4926ec4016443d6a8413e4c1fd81731cdbcd2dd0f2ad837f72c4ca9101c9263ec00339d6405396afdc02349a31b6c8b1aaaa39f0b7c153a2cbfa

  • SSDEEP

    768:yfLDqQkNP78i3C8A+XOGpeyr61urX1+T4uoSBGHmDbDTph0oX9otnWevLL0XvlS3:WmNvJn0tYUbJh96kevLLlucdpqKmY7

Score
10/10

Malware Config

Extracted

Family

asyncrat

Botnet

Default

C2

central-aberdeen.gl.at.ply.gg:8000

central-aberdeen.gl.at.ply.gg:10404

147.185.221.20:8000

147.185.221.20:10404

72.216.117.218:8000

72.216.117.218:10404

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      test.exe

    • Size

      63KB

    • MD5

      b3d01bc6330dc1f960e0a3b28fd6c7d2

    • SHA1

      c1bf78d5be2b0db5074d3a6bd588d42e7984561d

    • SHA256

      91d3ab6c2704b6471a45e0d5dd3537acd3058656d6f9b9c8194946974d8079a1

    • SHA512

      959c24e5a03a4926ec4016443d6a8413e4c1fd81731cdbcd2dd0f2ad837f72c4ca9101c9263ec00339d6405396afdc02349a31b6c8b1aaaa39f0b7c153a2cbfa

    • SSDEEP

      768:yfLDqQkNP78i3C8A+XOGpeyr61urX1+T4uoSBGHmDbDTph0oX9otnWevLL0XvlS3:WmNvJn0tYUbJh96kevLLlucdpqKmY7

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

MITRE ATT&CK Matrix

Tasks