General

  • Target

    23072024_0342_01-CITACION DEMANDA EN SU CONTRA -JUZGADO PENAL 01 CIRCUITO ESPECIALIZADO EXTINXION-01.zip

  • Size

    6.7MB

  • Sample

    240723-d9rv6awang

  • MD5

    da0f823b67bc093b75d381f2a105ecb6

  • SHA1

    11e82222f4070fbadc8c4c2f194ba65d9fa60ac5

  • SHA256

    ed88b5c4a8be75f5da0400817a9514bdcb38e602aa3fe463d39cec523dcd3268

  • SHA512

    3d2986bf2b9d6fc9c7251934f68eab8995dc33b1cf3886c2360afebdc2f9f35a088a2e0d92002a3c225a07095a5213677df78a4bf95ed77842d98a998b1e1016

  • SSDEEP

    196608:DLG4AO4eQBfDvBensLKd5rT0VjJ4azKIwI5CyrL7RkIXf0h:DygDQBjBGTAjJ4aXBrL7RkIX4

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

| CRACKED BY https://t.me/xworm_v2

Botnet

Default

C2

melo2024.kozow.com:8000

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_file

    AnsyFelix

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      01-CITACION DEMANDA EN SU CONTRA -JUZGADO PENAL 01 CIRCUITO ESPECIALIZADO EXTINXION-01/01 NOTIFICACION DEMANDA..exe

    • Size

      2.3MB

    • MD5

      5d52ef45b6e5bf144307a84c2af1581b

    • SHA1

      414a899ec327d4a9daa53983544245b209f25142

    • SHA256

      26a24d3b0206c6808615c7049859c2fe62c4dcd87e7858be40ae8112b0482616

    • SHA512

      458f47c1e4ccf41edaacc57abb663ee77ca098fffc596fad941bbdea67653aeabc79b34d607078b9ee5adb45614e26f5c28a09e8faf9532081fdd5dec9ac3c48

    • SSDEEP

      49152:DzO+g39FbI0eQf/Z3CarWedoYAmXviDTMtT2wkqN5K:DzO19Fnf/hdoYAm9ZkqN5K

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Suspicious use of SetThreadContext

    • Target

      01-CITACION DEMANDA EN SU CONTRA -JUZGADO PENAL 01 CIRCUITO ESPECIALIZADO EXTINXION-01/madbasic_.bpl

    • Size

      210KB

    • MD5

      e03a0056e75d3a5707ba199bc2ea701f

    • SHA1

      bf40ab316e65eb17a58e70a3f0ca8426f44f5bef

    • SHA256

      7826395127e791a883359ea81308174700da0af8052cc9853b19fd29c2e4badb

    • SHA512

      b0a3cfb6b34832f048fe0fc70c6fa76ae16a2cacda930f6529a83a967d6e8de1c69b93e0de3dc2126c5385d85e814687e695a0a4131399a69633141cad98da2a

    • SSDEEP

      6144:6N/kSQxE6qeM/k4qTl5L5e5+53WCG1CbF/FrfGx:JqeM/k4qR5L5e5+53WulZGx

    Score
    1/10
    • Target

      01-CITACION DEMANDA EN SU CONTRA -JUZGADO PENAL 01 CIRCUITO ESPECIALIZADO EXTINXION-01/maddisAsm_.bpl

    • Size

      63KB

    • MD5

      ef3b47b2ea3884914c13c778ff29eb5b

    • SHA1

      dc2b1fa7c7547d8f1ad3f20f9060f7bc686118e0

    • SHA256

      475f7cdffd8ed4d6f52bd98ae2bb684f1c923a1be2a692757a9af788a39b1d87

    • SHA512

      9648d951d8d3640436c8029fd0f06786f7ff8f52191cd6959569c87868bb6c40ac8c7e495c09377a8a5c85e8d3942551c37eb84e916b5c16327d8d43a167820e

    • SSDEEP

      1536:eNy3eqMne0sXB0IWtCLwEJhY0w1K7fixStj7wyis:CqMnfIB04LwEJhY0w1K7zzj

    Score
    1/10
    • Target

      01-CITACION DEMANDA EN SU CONTRA -JUZGADO PENAL 01 CIRCUITO ESPECIALIZADO EXTINXION-01/madexcept_.bpl

    • Size

      436KB

    • MD5

      98e59596edd9b888d906c5409e515803

    • SHA1

      b79d73967a2df21d00740bc77ccebda061b44ab6

    • SHA256

      a6ca13af74a64e4ab5ebb2d12b757cecf1a683cb9cd0ae7906db1b4b2c8a90c0

    • SHA512

      ba617227849d2eb3285395e2d1babfe01902be143144be895011f0389f1860d0d7f08c6bbc4d461384eba270f866cce3351f52af1dc9ef9719c677619de79e42

    • SSDEEP

      6144:1lAz49EKhEV30F8sl88nTjQ4Q50gEcW/jd+o72niVUNMa4Yn2g:1lG4ut30F8slzYlQcW/jd++2nJ6u2g

    Score
    1/10
    • Target

      01-CITACION DEMANDA EN SU CONTRA -JUZGADO PENAL 01 CIRCUITO ESPECIALIZADO EXTINXION-01/rtl120.bpl

    • Size

      1.1MB

    • MD5

      1681f93e11a7ed23612a55bcef7f1023

    • SHA1

      9b378bbdb287ebd7596944bce36b6156caa9ff7d

    • SHA256

      7ed5369fcf0283ea18974c43dbff80e6006b155b76da7c72fa9619eb03f54cef

    • SHA512

      726e8f58648a6abaf1f2d5bebcf28c1d8320551a3b6e7eef0cf8d99f9ef941e30e7004c24c98e9b5e931a86128d26de7decba202390665a005e972dcbe87ab93

    • SSDEEP

      24576:3bhz5FWbA1msvIRzM7Rk5JZzSQ4+Is2D9Tx0gboN:Q2hTKgboN

    Score
    1/10
    • Target

      01-CITACION DEMANDA EN SU CONTRA -JUZGADO PENAL 01 CIRCUITO ESPECIALIZADO EXTINXION-01/vcl120.bpl

    • Size

      1.9MB

    • MD5

      1384dcc24a52cf63786848c0ed4a4d1b

    • SHA1

      ea63180c94ea2d0417ad1860128980dd18c922ef

    • SHA256

      d19f51871484cc4a737196bdb048193ad73f7f6bd061ec813766516eba26e406

    • SHA512

      d405911672e3ea7abcbc898d7b807b9bc1dcbf4f83663d70bd8adab075960cf3d904b2710adbdafbcbb99ba4a41b9a40c64b7171e845255a91a042871b1ce8a3

    • SSDEEP

      24576:74gt8PRUMggrgN/5tWw+eNVEXZB5SOCwhuuYY8RP6S9YMPY5yz6I:7vSf0Ww+NpPSyzYY8I8YMPY4+I

    Score
    1/10
    • Target

      01-CITACION DEMANDA EN SU CONTRA -JUZGADO PENAL 01 CIRCUITO ESPECIALIZADO EXTINXION-01/vclx120.bpl

    • Size

      222KB

    • MD5

      3cb8f7606940c9b51c45ebaeb84af728

    • SHA1

      7f33a8b5f8f7210bd93b330c5e27a1e70b22f57b

    • SHA256

      2feec33d1e3f3d69c717f4528b8f7f5c030caae6fb37c2100cb0b5341367d053

    • SHA512

      7559cdf6c8dbea052242f3b8129979f7d2d283f84040f1d68ae10438548072715a56a5af88b8562aeea7143194e7c5bddac3fdb01ded411a0b1cac9f0c6eef3f

    • SSDEEP

      3072:K4af8kXL6nX0YXjvkWQ5vYhbNkWPFOEJ8YZbjeTl0Y25zFgYBzRKy6sB65avEtAA:baf8kLWL7Xov8bNxdOmrfgYmHA6h

    Score
    1/10
    • Target

      01-CITACION DEMANDA EN SU CONTRA -JUZGADO PENAL 01 CIRCUITO ESPECIALIZADO EXTINXION-01/winrar-x64-701es.exe

    • Size

      3.9MB

    • MD5

      6fd5d917d1afca88894bf84c93e31aa3

    • SHA1

      39f4cebfa25f2b8b8ce09adead8beaec2bbfb332

    • SHA256

      f5a13bb8f154db80fd9ebf38381f320dbc9741596eb6b910a18fe538dcf3a87f

    • SHA512

      694989d8e75d7e15845ee7ce24473bacb072fcd4db3778334eafe8310007c1cad1315db41c92d6eeee22cc9390947435d0f1e3381796804a0d411271b2e36d17

    • SSDEEP

      98304:KNRBOBfKGpFuQEluc/lFr/t+F5pu3s38rhG2XbFJYodwAg/dA8:cR/IFulVFMF5cY842XzYodwAW

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks