Overview

overview

10

Static

static

10

5eef5607e7...c9.exe

windows7-x64

10

5eef5607e7...c9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    99d4efaf9116f5232b1d02eba7f413f2.bin

  • Size

    23KB

  • Sample

    240607-dav4jagd9y

  • MD5

    ef9c4fe86cb9532e8b8da34c247d1065

  • SHA1

    2862b9f22812441493747289192e16e732e8d00d

  • SHA256

    ba4245fb6fbca9e6de7094757398e4b9ec3da6fdde5b939bb9348047a7df186e

  • SHA512

    94688f9a724581b5b2c769ea2d0b8f8c5267d7b1e67a70128fb6a67c8d1202ba39f3e3015c5705b689b75a035ad062540b45d18570aa082d52d91b8561b6577d

  • SSDEEP

    384:uvLFOcfC34LEDpXedJONLFMqL9QrteQRyaZwuWx/29roKTIH9HoFt5SRdxRwpzS/:ukcfJLEVudcVFv6rtepa7Wx/29cKsH9b

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

Default

C2

gfhfdhutr.duckdns.org:8010

Mutex

DcRatMutex_qwqdanchun

Attributes
  • delay

    1

  • install

    false

  • install_file

    nuevo.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      5eef5607e73cbe3b62c0c4adf6ea924acc471de57e86f3f0b66fe8320d3fcdc9.exe

    • Size

      47KB

    • MD5

      99d4efaf9116f5232b1d02eba7f413f2

    • SHA1

      271801bf76efe643f2ed404ea02c0fd7af6a3f68

    • SHA256

      5eef5607e73cbe3b62c0c4adf6ea924acc471de57e86f3f0b66fe8320d3fcdc9

    • SHA512

      b18bad2487577596959ba6e2530f0094d43674281cf86578e7a80ec7142666611abb5737371187d0ef3c470ada1f165fbb6733076e85b67f18a5d2f96126c9ca

    • SSDEEP

      768:ryzFyrIL6i22+riPJPaRD9SBiu3bEYbBgei80LgmJjuvEgK/JnqVc6KN:ryZgaNqUx3bLbut/JjunkJnqVclN

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks