Overview

overview

10

Static

static

10

17606b1fc0...e2.exe

windows7-x64

10

17606b1fc0...e2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    17606b1fc048068a5773b4b6b6e98b47008406f3b65766a39d0dca373ea603e2.exe

  • Size

    63KB

  • Sample

    240607-bj8d4seh9w

  • MD5

    5c0427f5412f89016cde6f9399bbf58b

  • SHA1

    360f684885100494cc3222c9accf39502061483a

  • SHA256

    17606b1fc048068a5773b4b6b6e98b47008406f3b65766a39d0dca373ea603e2

  • SHA512

    c375f78779010970c0a96a20c68b8bd7b417bc814771cb25a5b1acbe948c22c08a560e537abf1fad3ab4c60ed8c87ecef02b397e4ab0d15764484fc7edae4bfa

  • SSDEEP

    1536:UhjExLDRwQuNMXbmaeWs1lheeiMl8GbbXwQ9GpZVclN:UhjExLDRwQuNMXbreFlEeFmGbbXozY

Score
10/10
asyncratrat

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

C2

10.24.246.153:4449

Mutex

d21026eb8851fc57c7c

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      17606b1fc048068a5773b4b6b6e98b47008406f3b65766a39d0dca373ea603e2.exe

    • Size

      63KB

    • MD5

      5c0427f5412f89016cde6f9399bbf58b

    • SHA1

      360f684885100494cc3222c9accf39502061483a

    • SHA256

      17606b1fc048068a5773b4b6b6e98b47008406f3b65766a39d0dca373ea603e2

    • SHA512

      c375f78779010970c0a96a20c68b8bd7b417bc814771cb25a5b1acbe948c22c08a560e537abf1fad3ab4c60ed8c87ecef02b397e4ab0d15764484fc7edae4bfa

    • SSDEEP

      1536:UhjExLDRwQuNMXbmaeWs1lheeiMl8GbbXwQ9GpZVclN:UhjExLDRwQuNMXbreFlEeFmGbbXozY

    Score
    10/10
    asyncratrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Detects executables attemping to enumerate video devices using WMI

    • Detects executables containing the string DcRatBy

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks