General

  • Target

    JUZGADO PRIMERO DE MANIZALES.msg

  • Size

    407KB

  • Sample

    240717-zlsnfayblr

  • MD5

    e219e87fc5950863671944cb9fe40285

  • SHA1

    59e2f146a38889236f6300450e4558ef8a97f6c3

  • SHA256

    4f974c55a3df481e6e65bd0227236b06fe0099ba913bf80e1b5dc5d51191fa4b

  • SHA512

    e903fd06c3598a8d88cbfb9c5727e525362203a6c0c8226b99ff90d59128ff0893a0869ff1a38809f2f6442eb23219d95c29a13930bc29500b32e27a5fc3306e

  • SSDEEP

    6144:L6MkN67fBpCoK21dE+XlpJGwSsKldJLsuC:EwCJ21GApJGwvkJL

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

| CRACKED BY https://t.me/xworm_v2

Botnet

Default

C2

luci2023.kozow.com:6606

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      01-NOTIFICACION DEMANDA EN SU CONTRA JUZGADO CIVIL 01 DEL CIRCUITO.svg

    • Size

      351KB

    • MD5

      1aa8b795bd3e98afd55b5d688373d151

    • SHA1

      6b557551d3b4ce5c80cde80936eceab2bf044fa9

    • SHA256

      b89262f5bf4e5fc71c70c469c357e4fc7083b7ec03524e4afbec6ebee4966a18

    • SHA512

      714bbfed299da3b2524ac0372674ac42451987de9ddf9041cba5f4721a036c0841e30e735f65340f2d0824a1bc7d7ea6b755b7475b6ca35605f556dd4055d840

    • SSDEEP

      3072:bCkLBpCoMXyV1d/Cl+XlwdgrJGwS4BHKlgej1uduXuwTou9ucuXu3i+qAk+0uzxQ:bfBpCoK21dE+XlpJGwSsKldJLsuCF

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

MITRE ATT&CK Enterprise v15

Tasks