General

  • Target

    a55c7ed8b626f509f1db86fb6be1823a6bdf54b47c73a348cfe70c36e8b45d82.exe

  • Size

    63KB

  • Sample

    240629-b3e7ns1dmk

  • MD5

    8406bf53e6f2457c5fffb895943b04c1

  • SHA1

    c496e3ab44710259f5d9a5153d4471c2cfc6184f

  • SHA256

    a55c7ed8b626f509f1db86fb6be1823a6bdf54b47c73a348cfe70c36e8b45d82

  • SHA512

    77e81537492c79e62ef92d199f8db61b43f15d3c192472a908f798f10e480434eb14f96e850dc5d4302311bd28895fe862078e0f357ef06d5880e8e1f2d730d5

  • SSDEEP

    768:jnuguX1wbgyX78dIC8A+XkuazcBRL5JTk1+T4KSBGHmDbD/ph0oXXOP+5Y/9rWS3:rvCCPTDdSJYUbdh9em5Y/7uEdpqKmY7

Score
10/10

Malware Config

Extracted

Family

asyncrat

Botnet

Default

C2

147.185.221.20:36797

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      a55c7ed8b626f509f1db86fb6be1823a6bdf54b47c73a348cfe70c36e8b45d82.exe

    • Size

      63KB

    • MD5

      8406bf53e6f2457c5fffb895943b04c1

    • SHA1

      c496e3ab44710259f5d9a5153d4471c2cfc6184f

    • SHA256

      a55c7ed8b626f509f1db86fb6be1823a6bdf54b47c73a348cfe70c36e8b45d82

    • SHA512

      77e81537492c79e62ef92d199f8db61b43f15d3c192472a908f798f10e480434eb14f96e850dc5d4302311bd28895fe862078e0f357ef06d5880e8e1f2d730d5

    • SSDEEP

      768:jnuguX1wbgyX78dIC8A+XkuazcBRL5JTk1+T4KSBGHmDbD/ph0oXXOP+5Y/9rWS3:rvCCPTDdSJYUbdh9em5Y/7uEdpqKmY7

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Detects executables attemping to enumerate video devices using WMI

    • Detects executables containing the string DcRatBy

MITRE ATT&CK Matrix

Tasks