Overview

overview

10

Static

static

1

black.bat

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    black.bat

  • Size

    7KB

  • Sample

    240714-hb6zmszdqm

  • MD5

    1527117f206e85215dc0b306ff303997

  • SHA1

    058297bbc06690c0fc1614a27dccab912acbfd01

  • SHA256

    8ea56b9b4f79485aedb615161ba64c55950a6970f21dc0f2a7691dd66de91cd2

  • SHA512

    490de266e4516bee0cc6075ec693cbe53c629a1f9740df94951b780745ea67b452b96b6d4e413d9a144e2f853da4cbd0bfab86638440daf8cc7ac9a1269c4e4f

  • SSDEEP

    192:9y/GNQigY2Nw9GKNCufevytXrrLe57YKRZ280QDdc28eNMqMzDWZ:9EGNrJzsKUufKytXr2OKH0Mi28eNMqM2

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

10.14.0.3:6606

10.14.0.3:7707

10.14.0.3:8808
Mutex

SoDs5pvJ8zw0

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      black.bat

    • Size

      7KB

    • MD5

      1527117f206e85215dc0b306ff303997

    • SHA1

      058297bbc06690c0fc1614a27dccab912acbfd01

    • SHA256

      8ea56b9b4f79485aedb615161ba64c55950a6970f21dc0f2a7691dd66de91cd2

    • SHA512

      490de266e4516bee0cc6075ec693cbe53c629a1f9740df94951b780745ea67b452b96b6d4e413d9a144e2f853da4cbd0bfab86638440daf8cc7ac9a1269c4e4f

    • SSDEEP

      192:9y/GNQigY2Nw9GKNCufevytXrrLe57YKRZ280QDdc28eNMqMzDWZ:9EGNrJzsKUufKytXr2OKH0Mi28eNMqM2

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Blocklisted process makes network request

    behavioral1

MITRE ATT&CK Matrix

Tasks