Overview

overview

10

Static

static

1

01-CITACIO...A..exe

windows7-x64

10

01-CITACIO...A..exe

windows10-2004-x64

10

01-CITACIO...es.exe

windows7-x64

1

01-CITACIO...es.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    ed88b5c4a8be75f5da0400817a9514bdcb38e602aa3fe463d39cec523dcd3268
  • Size 6.7MB
  • Sample240724-2txcpsvfme
  • SHA256 ed88b5c4a8be75f5da0400817a9514bdcb38e602aa3fe463d39cec523dcd3268
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
asyncratdefaultdiscoveryrat

Malware Config

Extracted

Family

  • asyncrat

Version

  • | CRACKED BY https://t.me/xworm_v2

Botnet

  • Default

C2

  • melo2024.kozow.com:8000

Mutex

  • AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_file

    AnsyFelix

  • install_folder

    %AppData%

aes.plain

Targets

    • Target
      01-CITACION DEMANDA EN SU CONTRA -JUZGADO PENAL 01 CIRCUITO ESPECIALIZADO EXTINXION-01/01 NOTIFICACION DEMANDA..exe
    • Size 2.3MB
    • SHA256 26a24d3b0206c6808615c7049859c2fe62c4dcd87e7858be40ae8112b0482616
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2
    • Target
      01-CITACION DEMANDA EN SU CONTRA -JUZGADO PENAL 01 CIRCUITO ESPECIALIZADO EXTINXION-01/winrar-x64-701es.exe
    • Size 3.9MB
    • SHA256 f5a13bb8f154db80fd9ebf38381f320dbc9741596eb6b910a18fe538dcf3a87f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks