Overview

overview

10

Static

static

3

5393855b31...91.exe

windows7-x64

10

5393855b31...91.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5393855b310e160d5643744a5ad1cc91

  • Size

    131KB

  • Sample

    240730-jhd3wazckf

  • MD5

    5393855b310e160d5643744a5ad1cc91

  • SHA1

    a2b4b4504f1f272e33b18a6fbb98f4e5c0c371f2

  • SHA256

    068e03599b7f71f00c5ee9ee6b8d574cb722fa9b9302ef094cb8b99e94ea8ca1

  • SHA512

    ab1b87b32f79559b1d9756f982c8f992f86e0554de57abe19c6b5567ce0bd3c4cd275d0f3aa1a41c9ac18ea49f265f85d5a94967e0240cf840a8f779bbbd6b85

  • SSDEEP

    3072:vWayOLin02remkN7l5cZcLVSZhYoCL26+9P46yf8GOrOfm:v3yOmBr0yyfi7NNy

Score
10/10
asyncratdefaultdiscoveryrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

85.28.47.123:7707

Mutex

QTApl4idKp8T

Attributes
  • delay

    3

  • install

    false

  • install_file

    microsoftedge.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      5393855b310e160d5643744a5ad1cc91

    • Size

      131KB

    • MD5

      5393855b310e160d5643744a5ad1cc91

    • SHA1

      a2b4b4504f1f272e33b18a6fbb98f4e5c0c371f2

    • SHA256

      068e03599b7f71f00c5ee9ee6b8d574cb722fa9b9302ef094cb8b99e94ea8ca1

    • SHA512

      ab1b87b32f79559b1d9756f982c8f992f86e0554de57abe19c6b5567ce0bd3c4cd275d0f3aa1a41c9ac18ea49f265f85d5a94967e0240cf840a8f779bbbd6b85

    • SSDEEP

      3072:vWayOLin02remkN7l5cZcLVSZhYoCL26+9P46yf8GOrOfm:v3yOmBr0yyfi7NNy

    Score
    10/10
    asyncratdefaultdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks