General

  • Target

    25cb6a93394ba5bda060d06e0a3e7b578ed1d7d9893d78a6a8a04f441ca56fff

  • Size

    63KB

  • Sample

    240713-r52fpavelp

  • MD5

    4b1e909c6dc0c8ca86572aa2fab4c9c2

  • SHA1

    965b9dbd24b0f12034b370cd276a3ffc15ae626b

  • SHA256

    25cb6a93394ba5bda060d06e0a3e7b578ed1d7d9893d78a6a8a04f441ca56fff

  • SHA512

    4b575f5e8bd05b4571ac147b3c6b1d42b3053ff9ba2d3d95887af81dd5a847d7de650633520fe4cb6016436fa2a6fe5ab375bf5cdb487697424b80b18a3f147f

  • SSDEEP

    1536:xhAhLzkQU/QD83nxyl1eeiMl8GbbXwCk0GXtpqKmY7:xhAhLzkQU/QwnxylIeFmGbbXRY2z

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

RedTeam OpS

Botnet

Default

C2

193.42.11.31:1604

Mutex

OrionMutex_hunter

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      25cb6a93394ba5bda060d06e0a3e7b578ed1d7d9893d78a6a8a04f441ca56fff

    • Size

      63KB

    • MD5

      4b1e909c6dc0c8ca86572aa2fab4c9c2

    • SHA1

      965b9dbd24b0f12034b370cd276a3ffc15ae626b

    • SHA256

      25cb6a93394ba5bda060d06e0a3e7b578ed1d7d9893d78a6a8a04f441ca56fff

    • SHA512

      4b575f5e8bd05b4571ac147b3c6b1d42b3053ff9ba2d3d95887af81dd5a847d7de650633520fe4cb6016436fa2a6fe5ab375bf5cdb487697424b80b18a3f147f

    • SSDEEP

      1536:xhAhLzkQU/QD83nxyl1eeiMl8GbbXwCk0GXtpqKmY7:xhAhLzkQU/QwnxylIeFmGbbXRY2z

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

MITRE ATT&CK Matrix

Tasks