General

  • Target

    cf1ac26fdc15cd34b9fdc6a6906b323db066e00d63a421cc376129d86645b1d7

  • Size

    63KB

  • Sample

    240709-nvtfjssdmm

  • MD5

    940feefa06903f38abf31638bb3c8274

  • SHA1

    54ce0795ed9ba72d7546eb90b4c7b77de5eda26d

  • SHA256

    cf1ac26fdc15cd34b9fdc6a6906b323db066e00d63a421cc376129d86645b1d7

  • SHA512

    f035a88739f1520b9ea419a129fe6afa460cdaabc3d84a584edfb8854e406dd4c501e1c3ff3bca36ab4b2b2f001cae731fc8c5d4b806e4c78eb58d04d939b6b3

  • SSDEEP

    1536:qEXiftfNjJTSvYUbih9ogpcousdpqKmY7:qZftFjJTYYUbiNc6Gz

Score
10/10

Malware Config

Extracted

Family

asyncrat

Botnet

Default

C2

5.tcp.eu.ngrok.io:12431

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      cf1ac26fdc15cd34b9fdc6a6906b323db066e00d63a421cc376129d86645b1d7

    • Size

      63KB

    • MD5

      940feefa06903f38abf31638bb3c8274

    • SHA1

      54ce0795ed9ba72d7546eb90b4c7b77de5eda26d

    • SHA256

      cf1ac26fdc15cd34b9fdc6a6906b323db066e00d63a421cc376129d86645b1d7

    • SHA512

      f035a88739f1520b9ea419a129fe6afa460cdaabc3d84a584edfb8854e406dd4c501e1c3ff3bca36ab4b2b2f001cae731fc8c5d4b806e4c78eb58d04d939b6b3

    • SSDEEP

      1536:qEXiftfNjJTSvYUbih9ogpcousdpqKmY7:qZftFjJTYYUbiNc6Gz

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks