Overview

overview

10

Static

static

10

82dcc44da4...c5.exe

windows7-x64

10

82dcc44da4...c5.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    c383949898806f9a6aa1f967dd66244b.bin
  • Size 29KB
  • Sample240802-d386vsybrd
  • SHA256 86cb0deafb7a784743f7a7b6e008140244e0e5df424f71492e63d424f9118d62
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
asyncratwe need moneydiscoveryrat

Malware Config

Extracted

Family

  • asyncrat

Version

  • AWS | 3Losh

Botnet

  • we need money

C2

  • backwork07.ddns.net:6666

Mutex

  • AsyncMutex_VVXVZFyTYtHWDAzB

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target
      82dcc44da4b3454291a1d846414efde776b51bf2d30406cb9aa5bac020b0c4c5.exe
    • Size 62KB
    • SHA256 82dcc44da4b3454291a1d846414efde776b51bf2d30406cb9aa5bac020b0c4c5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratwe need moneydiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks