General

  • Target

    a67a38492e71bf6b9e463f58844aa516_JaffaCakes118

  • Size

    52KB

  • Sample

    240613-tvx2mazfkl

  • MD5

    a67a38492e71bf6b9e463f58844aa516

  • SHA1

    70e31f6515bd168255868244999a36436561f593

  • SHA256

    03be99f2ae370c21855c4005f1d2ead3608a7de143ab1a04c51453744f7c9ad1

  • SHA512

    f9aeb37cbd8d9d19c2c2c805bdd0161d10492a420202ac4f883489ad3fa21614b741d1f49d99d5800e0141e1999c0f93eea300b3636e59debbd9262b75a02b26

  • SSDEEP

    1536:ISmSIyaAK76ChPHLFfwOLgFUzET/38x/s2:ISm/Wcr1wO8FUzET/38x/s2

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

4pyramid.duckdns.org:6606

4pyramid.duckdns.org:7707

4pyramid.duckdns.org:8808

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      a67a38492e71bf6b9e463f58844aa516_JaffaCakes118

    • Size

      52KB

    • MD5

      a67a38492e71bf6b9e463f58844aa516

    • SHA1

      70e31f6515bd168255868244999a36436561f593

    • SHA256

      03be99f2ae370c21855c4005f1d2ead3608a7de143ab1a04c51453744f7c9ad1

    • SHA512

      f9aeb37cbd8d9d19c2c2c805bdd0161d10492a420202ac4f883489ad3fa21614b741d1f49d99d5800e0141e1999c0f93eea300b3636e59debbd9262b75a02b26

    • SSDEEP

      1536:ISmSIyaAK76ChPHLFfwOLgFUzET/38x/s2:ISm/Wcr1wO8FUzET/38x/s2

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

MITRE ATT&CK Matrix

Tasks