General

  • Target

    7f57d066c41310f2620a180d52dab454_JaffaCakes118

  • Size

    47KB

  • Sample

    240801-f96enavamp

  • MD5

    7f57d066c41310f2620a180d52dab454

  • SHA1

    4f60234d479fa57828bed548f4e44f28e5e1edad

  • SHA256

    81e96984130042d0ee70ae09a7bc9375974d513938e80877720d251330e4b37e

  • SHA512

    68c79b944418eb14ec29c48643b5efbb8f76343def6070b497430105b10829cf4e046c140f4746e1b20f789d9512443b58973890e97f5194468aad4b883ca853

  • SSDEEP

    768:eu/JRToSkobbWUnWCimo2qBQ9DJcyQPIzr3jg4T0b28EWAdYSiRsve40PCoLotBH:eu/JRT3T82bVzrzg9b28EF9imvOPCosb

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

fsft.p-e.kr:1

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      7f57d066c41310f2620a180d52dab454_JaffaCakes118

    • Size

      47KB

    • MD5

      7f57d066c41310f2620a180d52dab454

    • SHA1

      4f60234d479fa57828bed548f4e44f28e5e1edad

    • SHA256

      81e96984130042d0ee70ae09a7bc9375974d513938e80877720d251330e4b37e

    • SHA512

      68c79b944418eb14ec29c48643b5efbb8f76343def6070b497430105b10829cf4e046c140f4746e1b20f789d9512443b58973890e97f5194468aad4b883ca853

    • SSDEEP

      768:eu/JRToSkobbWUnWCimo2qBQ9DJcyQPIzr3jg4T0b28EWAdYSiRsve40PCoLotBH:eu/JRT3T82bVzrzg9b28EF9imvOPCosb

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

MITRE ATT&CK Enterprise v15

Tasks