Overview

overview

10

Static

static

3

NOTIFICACI...AL.exe

windows7-x64

10

NOTIFICACI...AL.exe

windows10-2004-x64

10

NOTIFICACI...01.exe

windows7-x64

1

NOTIFICACI...01.exe

windows10-2004-x64

1

NOTIFICACI...32.dll

windows7-x64

1

NOTIFICACI...32.dll

windows10-2004-x64

1

NOTIFICACI...32.dll

windows7-x64

3

NOTIFICACI...32.dll

windows10-2004-x64

3

NOTIFICACI...ar.dll

windows7-x64

3

NOTIFICACI...ar.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    19072024_1131_NOTIFICACION_PROCESO_JUDICIAL_DEMANDA_JUZGADO_03_PENAL_DEL_CIRCUITO-09.REV

  • Size

    3.2MB

  • Sample

    240719-nm4asascjh

  • MD5

    121818063b5f333ab1eea6744fbdecf3

  • SHA1

    c7a55f0a63c20bef46452e556b76c5b4ffaa8c28

  • SHA256

    b068551efd76728e44f1bf22c106e84960536cdb5245d22860b84e92eab894d2

  • SHA512

    e29f438d059945df455186035f7e6da64cecb8a7946e83cc13e9879ff9b142897250a94295f9bbe3213a6a7b81c066ac9b338108c52349b76d2f4566ee6c1ca0

  • SSDEEP

    98304:LGB/i4XRtl4l9NmU4LFR7SfUMNvGub4Qg1k+0udWR:54X767+LFZcUvucQg1kYdi

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

| CRACKED BY https://t.me/xworm_v2

Botnet

Default

C2

enviofinal.kozow.com:5051

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_file

    AnsyFelix

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      NOTIFICACION_PROCESO_JUDICIAL_DEMANDA_JUZGADO_03_PENAL_DEL_CIRCUITO-09/CITACION JUDICIAL.exe

    • Size

      3.1MB

    • MD5

      b841d408448f2a07f308ced1589e7673

    • SHA1

      f5b5095c0ed69d42110df6d39810d12b1fa32a1e

    • SHA256

      69a90665113bd73b30360d87f7f6ed2c789a90a67f3b6e86474e21273a64f699

    • SHA512

      a689734048109ab7bec9491bbb7781686c19c7885166b3ca2975e2f49e956fcc388cd8ca85a4e5a8bf9efe6056f1e0d80197b7f521d4f0d4cadb10ba9ef1fa93

    • SSDEEP

      49152:pvFg5qg9BtIAHE3SM4ahx6LK2SamuZob+tCjNrv8:Jm5qGBHBLRKuZfkjNrv8

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      NOTIFICACION_PROCESO_JUDICIAL_DEMANDA_JUZGADO_03_PENAL_DEL_CIRCUITO-09/Winrar/7z2301.exe

    • Size

      1.2MB

    • MD5

      1cfb215a6fb373ac33a38b1db320c178

    • SHA1

      d5d00e6ea8b8e68ce7a704fd478dc950e543c25c

    • SHA256

      9b6682255bed2e415bfa2ef75e7e0888158d1aaf79370defaa2e2a5f2b003a59

    • SHA512

      462876f1f3ee932d3f0363fd65a4043ded53c82a148bbe7b8e939384f752f35d0761eebd71f407cadd0b66ce96f30dadb071e3bd2d12a257a8e0dad04a63532a

    • SSDEEP

      24576:ifSpq8AF9zyUWnI2qSaNy3n6sHSgmOPXLyya7ctGDdvtl6bxj:ifTF3WIMWU6kSILyN7Bdr65

    Score
    1/10
    behavioral3behavioral4

    • Target

      NOTIFICACION_PROCESO_JUDICIAL_DEMANDA_JUZGADO_03_PENAL_DEL_CIRCUITO-09/madHcNet32.dll

    • Size

      921KB

    • MD5

      2ba4099eb6fbac4eaae2d6dfe71b4e18

    • SHA1

      fb6c32e1589cfa0121e15606932671f27ee963be

    • SHA256

      8bd3edbf027972636bdb4cbb46037f0be98ca233e19b003e860af0bd7526a0ac

    • SHA512

      953fe3a3328b871aac6ba9ce1242efa8e9d567f50eb22b3afee549ec9a83192b61ee479ddae44a5a63ee6594e8a73afda521f538f2e5eb750c15a00541864241

    • SSDEEP

      24576:DlUbWq3/gquYUJ4Vgv0eUnDaE0eyxfcT9D:ZUR4quYUJ4VgceXE0ZxfAh

    Score
    1/10
    behavioral5behavioral6

    • Target

      NOTIFICACION_PROCESO_JUDICIAL_DEMANDA_JUZGADO_03_PENAL_DEL_CIRCUITO-09/mvrSettings32.dll

    • Size

      1.0MB

    • MD5

      d168f18b79f9f33690f011d1deb1e7cf

    • SHA1

      cf0d984ce101ec274e65e88fae07daeb26de5a6d

    • SHA256

      b7d3bc460a17e1b43c9ff09786e44ea4033710538bdb539400b55e5b80d0b338

    • SHA512

      bbf085bcbc3c1c98caba95bdf48051bac18bbd1b7314c7bb55b56e3d423fb34758cc239c237091486cc466123bf02844eaac3b4435cb535af25dc2bca625af71

    • SSDEEP

      12288:1wsE8YWuTCipwKm3ZCdX+y0Cg57ZrVmK5UhYX5NN/u3ZeEb+LJkguVl1Y1e:XIWuFKKVuig5jZ5xX5P2bKyguJf

    Score
    3/10
    behavioral7behavioral8

    • Target

      NOTIFICACION_PROCESO_JUDICIAL_DEMANDA_JUZGADO_03_PENAL_DEL_CIRCUITO-09/unrar.dll

    • Size

      304KB

    • MD5

      851c9e8ce9f94457cc36b66678f52494

    • SHA1

      40abd38c4843ce33052916904c86df8aab1f1713

    • SHA256

      0891edb0cc1c0208af2e4bc65d6b5a7160642f89fd4b4dc321f79d2b5dfc2dcc

    • SHA512

      cdf62a7f7bb7a6d511555c492932e9bcf18183c64d4107cd836de1741f41ac304bd6ed553fd868b442eaf5da33198e4900e670cd5ae180d534d2bd56b42d6664

    • SSDEEP

      6144:e2Gk6wDaKov/5qrawOZI8uN0f/UVvN3MwdZFmiVFC+OEu:e2GkNo35qrawqmG/yM8PmiO+Ol

    Score
    3/10
    behavioral10behavioral9

MITRE ATT&CK Enterprise v15

Tasks