Overview

overview

10

Static

static

10

New folder...nt.exe

windows10-2004-x64

10

New folder...AT.exe

windows10-2004-x64

1

New folder...er.bat

windows10-2004-x64

1

New folder...at.dll

windows10-2004-x64

1

New folder...ra.dll

windows10-2004-x64

1

New folder...er.dll

windows10-2004-x64

1

New folder...er.dll

windows10-2004-x64

1

New folder...er.dll

windows10-2004-x64

1

New folder...us.dll

windows10-2004-x64

1

New folder...ns.dll

windows10-2004-x64

1

New folder...er.dll

windows10-2004-x64

1

New folder...ry.dll

windows10-2004-x64

1

New folder...ra.dll

windows10-2004-x64

1

New folder...op.dll

windows10-2004-x64

1

New folder...le.dll

windows10-2004-x64

1

New folder...ry.dll

windows10-2004-x64

1

New folder...ub.exe

windows10-2004-x64

10

New folder...at.exe

windows10-2004-x64

10

New folder...io.dll

windows10-2004-x64

1

New folder...rd.dll

windows10-2004-x64

1

New folder...ra.dll

windows10-2004-x64

1

New folder...er.dll

windows10-2004-x64

1

New folder...er.dll

windows10-2004-x64

1

New folder...un.dll

windows10-2004-x64

1

New folder...on.dll

windows10-2004-x64

1

New folder...er.exe

windows10-2004-x64

1

New folder...er.dll

windows10-2004-x64

1

New folder...ib.dll

windows10-2004-x64

1

New folder...us.dll

windows10-2004-x64

1

New folder...at.dll

windows10-2004-x64

1

New folder...ns.dll

windows10-2004-x64

1

New folder...er.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    New folder.zip

  • Size

    23.9MB

  • Sample

    240708-h91khs1bkd

  • MD5

    5f37eaa198df18270e858720d82197fb

  • SHA1

    226e30865cd19e68454056ca252b8b25d221c357

  • SHA256

    4c2c034fdbb93dbb5902b3863cd5328b99d91377150683de8e61e63297ef0d24

  • SHA512

    f85b5df5b6a195874e65d3ea36cb4d251cde009ff05e27006e33dc55e14998d3c424d379d5baf193d61fc06100b1ce87272fe75198d9772d403217143a4f985f

  • SSDEEP

    393216:KyYJrpV7UxnZaEZkAgcGvEbeprRI9HwYz8GwwU5GUVhZMIOPWa/FB6MSVn/dXgLD:KrpV72ZaEZAcCzRNnGUVhZMrrn6Ms1RI

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

127.0.0.1:6606

127.0.0.1:7707

127.0.0.1:8808
Mutex

QdNftpHJFSw4

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      New folder/AsyncClient.exe

    • Size

      45KB

    • MD5

      ca638cef81b67118a1c747a378228160

    • SHA1

      f3c7f9c1e2d474e9203a3a239346ea91f93e84f9

    • SHA256

      da9e561ecbb5cfff6d1c60660d5d37d5b072e8acfedd02bffb540185d366616d

    • SHA512

      0b21f52fe886b765c231782eee87060a24fe1cfeba61dcb2d3f3d1bfa1d654c84f157e04470dbefc74729dd85ded4f32834a1dad7b2c4515a091d1d20d44040a

    • SSDEEP

      768:mu/dRTUo0HQbWUnmjSmo2qMwKjPGaG6PIyzjbFgX3iQbR6HNnsIOkOe0hBDZyx:mu/dRTUPE2kKTkDy3bCXSQCn5+dyx

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat
    behavioral1

    • Target

      New folder/AsyncRAT/AsyncRAT.exe

    • Size

      6.4MB

    • MD5

      97a429c4b6a2cb95ece0ddb24c3c2152

    • SHA1

      6fcc26793dd474c0c7113b3360ff29240d9a9020

    • SHA256

      06899071233d61009a64c726a4523aa13d81c2517a0486cc99ac5931837008e5

    • SHA512

      524a63f39e472bd052a258a313ff4f2005041b31f11da4774d3d97f72773f3edb40df316fa9cc2a0f51ea5d8ac404cfdd486bab6718bae60f0d860e98e533f89

    • SSDEEP

      98304:+bPmDVa3VxobFwUN5xXhAqin1MNuSZTKA0t9FFPEG6xJJ33Je2PsBpCz6Ry:+7aIXUN5htin2bk9fcPHJDE7Cz60

    Score
    1/10
    behavioral2

    • Target

      New folder/AsyncRAT/Fixer.bat

    • Size

      141B

    • MD5

      52ab2690a33a51804764be81820504aa

    • SHA1

      36af53e8b27ea737c255402156c77c5f9be17aa0

    • SHA256

      5255fa89ba49c5f1f2c81d66d42e3b16305296945683954eab1492ed11b90b4c

    • SHA512

      95579203bd7e3f2104ad2f886b162f9938d6e371ba351b0b9c5fb5d3368d674f22f4c2ccc54aece5a9ab5f044ca9deeed63a4ad30ffd42787c54807c8396f21b

    Score
    1/10
    behavioral3

    • Target

      New folder/AsyncRAT/Plugins/Chat.dll

    • Size

      367KB

    • MD5

      b230da150aa974d2a0801cef654cbe05

    • SHA1

      ab28e63c165ebd7d43d6d0eed4de2750743b9b27

    • SHA256

      37d41c7042210845593ddd7e5a5e37a37f6605305264d50a30aa2be1686000f6

    • SHA512

      2d81546548b6ed2e799eaaf4766ac9a811344d9f57726bed7270e289234f7b917df07deff9d1f6e93b9f4d186daefcbfd2d0181b12406a0b5b81e3bdffa65aaf

    • SSDEEP

      6144:x5S/ect/xQQq1EFBa1jTfHjGqyREilSwAV:x5G/e1EFQ1jzjGREy

    Score
    1/10
    behavioral4

    • Target

      New folder/AsyncRAT/Plugins/Extra.dll

    • Size

      375KB

    • MD5

      3bbcb7c7967c714f767d751db17ed1d0

    • SHA1

      ea15b176c5c7073bfa3bb58ebe9280b032414fbc

    • SHA256

      7dd3978e7721f4460d639d17c47fe1307917dbacfb858d0d12e403105cd47089

    • SHA512

      c20bf3b9b4051b050b6efebbe3c6ea54e520d68172f4ef7bbab961169c4479e9c77b39719e0139edd6ff4c4366b355579226f49aa979331ac8ab8c69bf3a165f

    • SSDEEP

      6144:/rUTePJZAbxMCgxth8mzMkv8WLBuqcLA5rm5N8LBOTqi:/jA6jL93J4H

    Score
    1/10
    behavioral5

    • Target

      New folder/AsyncRAT/Plugins/FileManager.dll

    • Size

      392KB

    • MD5

      9caa1fa3b3b7824167610d309446223d

    • SHA1

      093fa014488ea1ddacf083c398fb8b2d07b8a0e0

    • SHA256

      9d1b94035f381b5183e82a317f001725674c8ea1c5cd82ab5af408f7f53ca19d

    • SHA512

      feba121ed3ccdef26b0c78874c5247cbb223b2992649fed6bbc088bfe952cf86de1145d84666048ad37b0f2c6a9dcd4da95cf972ec790b43deeb1c22322d17e1

    • SSDEEP

      6144:6vqHIAq0cvNthE4a2pO/LyRJPZVjTT6gsduuufuujuFyJTququqqqqqqLffffqpU:6vqH/glcwkU5mgsRU0OGF

    Score
    1/10
    behavioral6

    • Target

      New folder/AsyncRAT/Plugins/FileSearcher.dll

    • Size

      433KB

    • MD5

      4e1922ee8333847507a34823ed695131

    • SHA1

      5df1f96b0a0a43eadeb101c54864a85cf51e9521

    • SHA256

      a6bdd625fa1d9a7ee66e4ca09ced0b3dca8afd2ad92ecaf44fd9a879b57cb198

    • SHA512

      e4f2bc24f7d44e19580d561599b563ef2d011cffbd64851c867b03aab22e650da55150b6bc9c02389acffe546efdcc17da72204fef4e6e49a53e27be1a290f0a

    • SSDEEP

      6144:TwLb1j1VL6d/kA1EegwpfzSv/OLpvt4WIkE0ej:Tib1jKcA1ow9+Q2WIkE0e

    Score
    1/10
    behavioral7

    • Target

      New folder/AsyncRAT/Plugins/LimeLogger.dll

    • Size

      368KB

    • MD5

      732839c93b7e0ab6796cb1c4544eda66

    • SHA1

      2dc3d39d74a5b72e6320596f92bcfc15edda3915

    • SHA256

      cd5cdf0eade067fb0d97881258e4e29d88386cc9ec7a6ea315d159d284858857

    • SHA512

      faa264925d636fa743d0448ce97c0b26ed7974b48c2fbf66000993119749d721bc27cf2626c3eaac3b1374abc0d16cca9e8222c4da054d1aeb56b34505fbeec6

    • SSDEEP

      6144:T7qj3iWg0kHC86FItOZrhFx4aXCEzwHyFt:T03iutXCa2g

    Score
    1/10
    behavioral8

    • Target

      New folder/AsyncRAT/Plugins/Miscellaneous.dll

    • Size

      560KB

    • MD5

      07ba8685ca3faff186f0d9f5400c1117

    • SHA1

      a673a7b55e4cf168856a7d3564a5521f0f8fc4e5

    • SHA256

      783d9d5334aa40f35acf8ff941a6b5bed908fd94dc14a05712b8a9eb9220cd5b

    • SHA512

      358c85a586d8b590497ea180eae76608ef38a4de09b95e907632bbad8f2c522bec4ea5568017ea1120a1553abb2be730006613872fe053b1fc00a36d005ab096

    • SSDEEP

      6144:ZksM6LbRsGOlShLHZIVEvLht0Raf2K/lPqmiGk4IuzvjPEzd4P0m/KUweRq:pM6nRsHlSRLBuwImD5f88B

    Score
    1/10
    behavioral9

    • Target

      New folder/AsyncRAT/Plugins/Options.dll

    • Size

      378KB

    • MD5

      a1b5048e3f10f7105bd47244b2930137

    • SHA1

      a12cbae3ec815ce704fafb0e2eadb9f31ccbb6f3

    • SHA256

      8dc80b8bf9b3123289e132270e74a31176deec4f74e6ac20d7b6a9fcdb89e8a1

    • SHA512

      fcae7c456f71e03afe2e67954fc3c9491978a54825436c51b351c47adb6cd8a1ef15e0e6f6d99094b986ff910e21a287a7de9e4ca2818221aa858152a8c6dfe9

    • SSDEEP

      6144:k7VK+5AKNyvekG+3IoH3MAYV+kpDBWOcFN94f:kk3Kg731H3Md+XHf9

    Score
    1/10
    behavioral10

    • Target

      New folder/AsyncRAT/Plugins/ProcessManager.dll

    • Size

      361KB

    • MD5

      fced22a0c1edad786a59703842fd3b14

    • SHA1

      dceabc613c694f7f2f6439ea176988fb373d6a29

    • SHA256

      3ad861ad9bc3edfdd486c060879f4f2450a51757c67f3b514f71381057580218

    • SHA512

      8904c36c364d29244c598895e877d7897547ce2a187adb197ba281a0512ca3ff52464c478fc42a2ec7f614dd0f91dea2dbb31f4af81c6c0f08cd23f79a71f57c

    • SSDEEP

      6144:hyk5beTVvGG3vwtudJgKsvAjHvzA1AXly:wNGGotYJQvgHbKA

    Score
    1/10
    behavioral11

    • Target

      New folder/AsyncRAT/Plugins/Recovery.dll

    • Size

      600KB

    • MD5

      d8793438a77750cea1b0d7eaad3d0d0d

    • SHA1

      36bb36d6dabaa1285dbe7ba26581322630984c71

    • SHA256

      7fd48ac68f182e0ced2ace00b223fa1d35bd8a20d75600b5400267cd5db5cc84

    • SHA512

      68e00d97edf0ab768d40672d3b39dfcd09d8ff81b3e6abfdcfa8db88d66ae6070c8b6ad2c540538dd6f47da0174f9ab2d48cd7bef95d6021ffb844c71289822d

    • SSDEEP

      12288:3I5Ii5aNgfO5Bt844Wn1JwygRuE4pYGmDonx:3IcqfOryJWnVrYNDIx

    Score
    1/10
    behavioral12

    • Target

      New folder/AsyncRAT/Plugins/RemoteCamera.dll

    • Size

      452KB

    • MD5

      1b2c9164e625b600e699151de11d9e98

    • SHA1

      2ce0aa3161c641623afd1acfa922fce5f10a709c

    • SHA256

      87938027a63a867b831c86611dc6a2c1fc6af61526dc2269328af4b59e15b1e1

    • SHA512

      aa0785b079059463a1df409380451c2be7c3bd627a199661627815f364689ed3816dc9cb78725fab510d687d6866186f3fbdb62b633554b9a0aa324730487729

    • SSDEEP

      6144:npMSjYV8M+c7YervSBlnzYuYyb5A5XAxCqDS5aVorhdt+b5V20JBmYrtog:nqV8a0OaLYCAQLD8CF5h3t

    Score
    1/10
    behavioral13

    • Target

      New folder/AsyncRAT/Plugins/RemoteDesktop.dll

    • Size

      390KB

    • MD5

      cd4a9e669264419eca4de564e6272fe0

    • SHA1

      bb69bb1542ea06395df74dbedc98866d6c8a36cb

    • SHA256

      56fd699258a7186f709068c283cd725797bab392e3a6f1cd28f35bbdb3e98e38

    • SHA512

      5addb4f97c7e1cb69e5167e670bd2c3a817e0415f1fd8a5158af7e03e4340a8b1a6d803e85c9ea56415b9e7d3dcb4c352775a6a6b4770443d72114396ffaa1e5

    • SSDEEP

      6144:KdHdVObvTS8nmScJEB/2Jin8SF1hG+ht6Oaynf/wKlWCkKI5J5sZva:xCQ2wHFagf/wKlncg

    Score
    1/10
    behavioral14

    • Target

      New folder/AsyncRAT/Plugins/SendFile.dll

    • Size

      368KB

    • MD5

      c4b11c003ed1e394597f6a5201826a59

    • SHA1

      8de5d19d0d1638f24718bf87c3245cef74f48341

    • SHA256

      1a717c40ff7f60c18953b46a69a8fc47cce7dad6116cd3715deb2abf0d80722d

    • SHA512

      ee93a9bd9f77284af5fe0b4d1ef96fbb0ded00aeb045cae380bfc01be45c76d9d0a481f1d4a6f206124603b99c23a8b6054dcdc65e7e5913373b1739e1b310b1

    • SSDEEP

      6144:7aU0XFbDW0+JDzXNj8QrGchz6q7V7u85:7aU0XCJDbdnrGyT1

    Score
    1/10
    behavioral15

    • Target

      New folder/AsyncRAT/Plugins/SendMemory.dll

    • Size

      367KB

    • MD5

      dbd937cf1098405994b1295056dce5bb

    • SHA1

      9b47cff5dc8cc6b4868a3715412b425c2b5b49cf

    • SHA256

      b0b5dda6cac5d1e91958379dc1fda602dd1566127f21e30196382743a350a4d8

    • SHA512

      2795b1249829d43f43291394fd33821caa3a0ed654c3d9a75f0cd52ac94f1e1bb3d2ab87f81333779d789112c359ddb059c8b4616c95903761b1539e54ec9d61

    • SSDEEP

      6144:QJ+x17+H67OgnfFPE0f4UKXdEvllmXOocZqOA8IhOueA1Cv6afvx:iPonRE0f4UKXdE9lmXOocZqD51CyE

    Score
    1/10
    behavioral16

    • Target

      New folder/AsyncRAT/Stub/Stub.exe

    • Size

      38KB

    • MD5

      f76702fa423ce2b2b4b0fdcf547b0789

    • SHA1

      ea408a4419e8a3139ef14df987608964c12d3190

    • SHA256

      0e19cefba973323c234322452dfd04e318f14809375090b4f6ab39282f6ba07e

    • SHA512

      03c7d8814687bb4f11ac41a555f368d89d5be749c92624073b77da0e57d872df201f2657b180ad0c9d5bc9ffa0a85989bf31374c7e5deefa06cf36bce3697971

    • SSDEEP

      768:9Xaug0LrCc4d7VtOjkR26/XgNhKwEuyj67zACVyI1rXDjkY5Z07:dafSuVtOGfgTKwt3Nk7

    Score
    10/10
    asyncratrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat
    behavioral17

    • Target

      New folder/Borat/BoratRat.exe

    • Size

      20.0MB

    • MD5

      65b694d69d327efe28fcbce125401e96

    • SHA1

      049d4d71742b99a598c074458f1f2d5b0119e912

    • SHA256

      de60ecbbfef30c93fe8875ef69b358b20076d1f969fc3d21ab44d59dc9ef7cab

    • SHA512

      7ab57642e414e134e851d9aa2ed3ef8b483f3a5f77877cdc04e08d7f95c44884f8ccc6beaf8ba7f6949cfd7398c46be46c024d4fdeacd3a332d4565609baad5b

    • SSDEEP

      393216:V+G+oTCP+Zw6NLIsFfskh1BmXGnfBd+Uw:IGpTCP+Zlnk0rmkBYUw

    Score
    10/10
    asyncratrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat
    behavioral18

    • Target

      New folder/Borat/bin/Audio.dll

    • Size

      23KB

    • MD5

      9726d7fe49c8ba43845ad8e5e2802bb8

    • SHA1

      8bcdf790826a2ac7adfc1e8b214e8de43e086b97

    • SHA256

      df31a70ceb0c481646eeaf94189242200fafd3df92f8b3ec97c0d0670f0e2259

    • SHA512

      f97bc1e2ecbbc979d0eea3559c2da0982e4617eb217603224263ef825b8d98b3c52392eeef41888e6295fb60d362f9521e2f2bdaccc762c4591565f9e6248658

    • SSDEEP

      384:cSRj1EfmW3sHmH+6kBdseXGDfICDzu5RQ0juAa04FOkhcV:cSRj1N0sHieK/7CuAhROw

    Score
    1/10
    behavioral19

    • Target

      New folder/Borat/bin/Discord.dll

    • Size

      24KB

    • MD5

      7ee673594bbb20f65448aab05f1361d0

    • SHA1

      2a29736882439ef4c9088913e7905c0408cb2443

    • SHA256

      8fa7634b7dca1a451cf8940429be6ad2440821ed04d5d70b6e727e5968e0b5f6

    • SHA512

      f5d8457279a5c0684c075eae2d3de62b672303520a1c725b4f97787961e6043c73ca68d4353e5d4168a427104be65b74a9c92a87419348e92d772368e94fab7c

    • SSDEEP

      384:d0FmIXW/ppmaCnN594J+Im/tvp2BdseXGcdh+JaL6EWAVuk5mSZ7rN2TD118Ksuz:sECaC7iGqQ0jNZ5mSZZWDEKsK

    Score
    1/10
    behavioral20

    • Target

      New folder/Borat/bin/Extra.dll

    • Size

      31KB

    • MD5

      62c231bafa469ab04f090fcb4475d360

    • SHA1

      82dda56bc59ac7db05eddbe4bcf0fe9323e32073

    • SHA256

      6a4f32b0228092ce68e8448c6f4b74b4c654f40fb2d462c1d6bbd4b4ef09053d

    • SHA512

      515fbdc9e792bd7ab711261c1d0185351079a2d5b104211c559cfc4c8465794ef897c43f0f825b4fc2e97a56525f73c3ad0a28de0fcf8b8bff89c26d1c97b3cc

    • SSDEEP

      384:UX8AFmmb7f0BOheE6qCt57udseXG8WIThDkz7R3bu4Uwvs7c9K7ZvTbJlXKyckew:E8Avb7fwCk1uLRkVsA9K7Zv76keFBFu

    Score
    1/10
    behavioral21

    • Target

      New folder/Borat/bin/FileManager.dll

    • Size

      32KB

    • MD5

      4ccd3dfb14ffdddfa598d1096f0190ea

    • SHA1

      c68c30355599461aca7205a7cbdb3bb1830d59c8

    • SHA256

      7f8a306826fcb0ee985a2b6d874c805f7f9b2062a1123ea4bb7f1eba90fc1b81

    • SHA512

      2fa3ea13054d84e1a307ddc63f2a364c760b8e1882fee975585e6e1bae41cad3463495d22d0c8fb77d40e6b0336c3537ab68efb5fd84e46063a336ba20672cbc

    • SSDEEP

      384:GEGHWHugXvIgTmm49cj7ddseXGMBNhD8mouIXA4Pcg4lYzMnIqE7GMiBrNelgPU:Gb2fN49ydxZyXMXLnIr7GMarNc

    Score
    1/10
    behavioral22

    • Target

      New folder/Borat/bin/FileSearcher.dll

    • Size

      277KB

    • MD5

      0b7c33c5739903ba4f4b78c446773528

    • SHA1

      b58555bebddf8e695880014d34a863a647da547e

    • SHA256

      2d9625f41793f62bfe32c10b2d5e05668e321bcaf8b73414b3c31ef677b9bff4

    • SHA512

      d3ea78dcc15e5f365df55558b911f3289f516ecb16c07b7132084ec2e3b10f496d1ef0774416775c14caffbf3107220cfc19ec910cdb2637561b12a23fd1e43f

    • SSDEEP

      3072:EGFYQ/KZdG6oE1nKSYfTvqCjUKidQTs2pccc9k1DEIWcSCSLeyYcEeI/KQ73WmbN:EnwLrSYfDjtlAx9k1An4pE0

    Score
    1/10
    behavioral23

    • Target

      New folder/Borat/bin/Fun.dll

    • Size

      33KB

    • MD5

      499fc6ac30b3b342833c79523be4a60c

    • SHA1

      dcf1ed3fbc56d63b42c88ede88f9cad1d509e7ec

    • SHA256

      dcac599b1bab37e1a388ac469e6cc5de1f35eb02beaa6778f07a1c090ce3ea04

    • SHA512

      b63dcf0f42a4e80747556000aeee72137735cb7177567df6cfef3f15471efb8c4dc797db8cdc870d66cd87f09ffc7ab177969b126825a69e4b5390b568462484

    • SSDEEP

      768:DOFmXPm7MACQnB5vrTh+g0R2Lybx9gnn:DOFNnB5XJL8e

    Score
    1/10
    behavioral24

    • Target

      New folder/Borat/bin/Information.dll

    • Size

      24KB

    • MD5

      87651b12453131dafd3e91f60d8aef5a

    • SHA1

      d5db880256bffa098718894edf684ea0dc4c335d

    • SHA256

      a15d72d990686d06d89d7e11df2b16bcd5719a40298c19d046fa22c40d56af44

    • SHA512

      1b911a877c5a3f508421f4f250d95861a5c110cb4b67ffe05de157085c5a018d34d9574c1ef4cf9eec3ba3cdd39985863564ea2f77814812032ea796cb329afa

    • SSDEEP

      384:zsvmkKbpmUGZdseXGvXhDYLuqInXx3McZ+RaYzwM3tllsXxMSDv:w+kKb0bZIqInpXZ+RtzAxMSj

    Score
    1/10
    behavioral25

    • Target

      New folder/Borat/bin/Keylogger.exe

    • Size

      10KB

    • MD5

      a45679bdcf30f068032bd37a194fa175

    • SHA1

      f23fd98f28bb0b482f0aae028172e11536e4688c

    • SHA256

      16beb1ae2de2974ccc2371d9f619f492295e590abb65d3102e362c8ec27f2bbb

    • SHA512

      3b6a954de9ec3b82719af8c3fd3de2137096b182990363abc8a68e20c1d1d419fc594a7955759a64de3582a92662315a3ead8193c2806efcff113dc2c61c4518

    • SSDEEP

      192:mStmcuq6QIDxi4maEYbRzmEsLkugv5JHTeeJYHcwY7fazItxEEi:mStlF6QmE9rUhVsLe5perYyAEE

    Score
    1/10
    behavioral26

    • Target

      New folder/Borat/bin/Logger.dll

    • Size

      26KB

    • MD5

      872145b37d107144894c9aa8729bad42

    • SHA1

      01610587bcfa7ac379b1f0169a2a9ab384b9116b

    • SHA256

      2f258949fd95da6cd912beb7203a9fd5e99d050309a40341de67537edb75aadc

    • SHA512

      0c926d24515b8ea80586c80d2613136f802badde3a788d2960ebd8f6a4d6e901d1ea220262f3d2a852c4f3da88bd69915070de920bc79eb82329c44dcab98435

    • SSDEEP

      384:ny2nOVC1a1WmAcsH2Co9KPdseXG8iIhDbuLCG4kNmXWuxb87AMFah:nrQ1hNsnPZ1Jk6875O

    Score
    1/10
    behavioral27

    • Target

      New folder/Borat/bin/MessagePackLib.dll

    • Size

      16KB

    • MD5

      590b00c87d5ff2ffe09079f0406eb2cd

    • SHA1

      92c91f1db8c2c8cc34c2e1a26f4f970f1518a7ed

    • SHA256

      adb00dee751b4ba620d3b0e002f5b6d8b89cf63b062f74ec65bba72294d553d1

    • SHA512

      9396620bb9d77cacd7bc2bfa44e8fb76091e314298434d8ba995595df0b2a13edf8229c465b563aa668702176ccf2de34e9fd3d1567d4ff20d94672aba4ad745

    • SSDEEP

      384:omnkO72iseXGr8puUUqmMDRVE7PuFRQ5:7nkprnJMDRVE72I

    Score
    1/10
    behavioral28

    • Target

      New folder/Borat/bin/Miscellaneous.dll

    • Size

      82KB

    • MD5

      509d41da4a688a2e50fc8e3afca074c7

    • SHA1

      228de17938071733585842c59ffb99177831b558

    • SHA256

      f91973113fd01465999ce317f3e7a89df8c91a5efadcfa61e5ccce687bf3580a

    • SHA512

      86f975c75e246100d0486aa1507f5c2030323649ae921af51583c6b287e6780e9a9bf887ef4ead11599742cdeb7c90380c7d4859340e11913c2c1f42fb34ef8e

    • SSDEEP

      1536:+Zce38lSJ3k45otUV251nos3O4Raam/an:+ZceRU4KSV213O4Raat

    Score
    1/10
    behavioral29

    • Target

      New folder/Borat/bin/Netstat.dll

    • Size

      24KB

    • MD5

      12911f5654d6346fe99ef91e90849c13

    • SHA1

      1b8e63d03feb84d995c02dcbb74da7edfaa8c763

    • SHA256

      7eed1b90946a6db1fe978d177a80542b5db0bf3156c979dc8a8869a94811bf4b

    • SHA512

      588971ef7aebae7afffb22bafdf8f8bb04bf3c474eabf6637543fe42e3e1800cc824929d953055a4f666776ea5fffe0389ef6216c1dca437e0c8a330f6670c19

    • SSDEEP

      384:crl+bbgmsHmxSRmqe5HPwKRsJGAdseXGOhBReDmYuFCJG0BBR93NNRk+rs25x55/:cwbWGcMqc45L6eC1B79Tk+gn8sO

    Score
    1/10
    behavioral30

    • Target

      New folder/Borat/bin/Options.dll

    • Size

      378KB

    • MD5

      3a474b8dee059562b31887197d94f382

    • SHA1

      b31455f9583b89cac9f655c136801673fb7b4b9a

    • SHA256

      c9b8e795c5a024f9e3c85ba64534b9bf52cc8c3d29b95ff6417dc3a54bc68b95

    • SHA512

      cdda908adb88603302b33c99befed0394f12cc34c5a31bc7b4b614df3615ea8a6cad7ef84e7b9865342f33783006974027e39fd458e5936dec14c8ae5e98bf0a

    • SSDEEP

      6144:DTG2nhDLZ03+biuOd1jScGHkl6GfIrOzXevKvhzmYVV7+FWWz06v:/nnzEYcVXevWBVqO

    Score
    1/10
    behavioral31

    • Target

      New folder/Borat/bin/ProcessManager.dll

    • Size

      25KB

    • MD5

      91edcb945924df5fbf4ff123aa63199c

    • SHA1

      d124869aaee9aa1a49def714774b834335aa746e

    • SHA256

      5b1f80ff787bdcd7ee12aa64be1f2f5f1f658bd644bbc5fd73527b51da6ce0d6

    • SHA512

      6927c1576a8a9ff724fe3b7d53067f97c121b272c1f2528cb8aa1806de61f36504ee4d25d56eb717a1010a80fb6b5e37c1a0c30b256fdb9a5ba5b31794146c52

    • SSDEEP

      384:IiL3RGwNe7Nm1T33T9OZNA8SwCguRvsPzHdseXGii6ZDWl9UZ5QDBfqFuGvAzx/B:IiL3A2eg1L3B7wUvsPT9mGvixVX

    Score
    1/10
    behavioral32

MITRE ATT&CK Matrix

Tasks

static1

ratdefaultasyncrat
Score
10/10

behavioral1

asyncratdefaultrat
Score
10/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

asyncratrat
Score
10/10

behavioral18

asyncratrat
Score
10/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10