General

  • Target

    f8bcd12f0b30a378747069cc28aaae74d30aafc33656152ee34f818a10e8973f

  • Size

    545KB

  • Sample

    240621-pa9sgashkq

  • MD5

    9c17bdda52e21d8df835cee315b506dd

  • SHA1

    f01ccf02c4b92dc8e261da1e48f54ccd548c8af0

  • SHA256

    f8bcd12f0b30a378747069cc28aaae74d30aafc33656152ee34f818a10e8973f

  • SHA512

    7acd79e169949ef7445230ea474a38786cda317469be340fa94b83dcf26b0025b0baff45ff37c88c632ceaef6565a503d7f19d3884c467f8d68c28f86c3f9889

  • SSDEEP

    12288:BrMNAQs0dT4WxW+x4WrD5D4TIVz1OhZcsY:B4NAed3VJOHzY

Score
10/10

Malware Config

Targets

    • Target

      f8bcd12f0b30a378747069cc28aaae74d30aafc33656152ee34f818a10e8973f

    • Size

      545KB

    • MD5

      9c17bdda52e21d8df835cee315b506dd

    • SHA1

      f01ccf02c4b92dc8e261da1e48f54ccd548c8af0

    • SHA256

      f8bcd12f0b30a378747069cc28aaae74d30aafc33656152ee34f818a10e8973f

    • SHA512

      7acd79e169949ef7445230ea474a38786cda317469be340fa94b83dcf26b0025b0baff45ff37c88c632ceaef6565a503d7f19d3884c467f8d68c28f86c3f9889

    • SSDEEP

      12288:BrMNAQs0dT4WxW+x4WrD5D4TIVz1OhZcsY:B4NAed3VJOHzY

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks