General

  • Target

    ae36b5486b5f95cb451985cf270963956822bbfaded42c35da3abced9bff2f3d

  • Size

    63KB

  • Sample

    240802-sfgknatdna

  • MD5

    ce0eb5168feda8b72aa9cbfe311378e0

  • SHA1

    18248cf6a415bc816b0a983b3dd74da7a9ee9023

  • SHA256

    ae36b5486b5f95cb451985cf270963956822bbfaded42c35da3abced9bff2f3d

  • SHA512

    5a2fa589276afcac414ebb0424f1a56bdeb28cd8999f8902c81083961eecfd7b13639df67f52375c32fc7b5e616724baa79b722508414db5e7d12e1af4268013

  • SSDEEP

    768:iK7epXkjhxfm785YC8A+Xz2peyr61urX1+T4uoSBGHmDbDTph0oXI9tBE9SuQdph:NDhxf8Qn0tYUbJh94ZuQdpqKmY7

Score
10/10

Malware Config

Extracted

Family

asyncrat

Botnet

Default

C2

and-statements.gl.at.ply.gg:43442

Attributes
  • delay

    1

  • install

    true

  • install_file

    test.exe

  • install_folder

    %Temp%

aes.plain

Targets

    • Target

      ae36b5486b5f95cb451985cf270963956822bbfaded42c35da3abced9bff2f3d

    • Size

      63KB

    • MD5

      ce0eb5168feda8b72aa9cbfe311378e0

    • SHA1

      18248cf6a415bc816b0a983b3dd74da7a9ee9023

    • SHA256

      ae36b5486b5f95cb451985cf270963956822bbfaded42c35da3abced9bff2f3d

    • SHA512

      5a2fa589276afcac414ebb0424f1a56bdeb28cd8999f8902c81083961eecfd7b13639df67f52375c32fc7b5e616724baa79b722508414db5e7d12e1af4268013

    • SSDEEP

      768:iK7epXkjhxfm785YC8A+Xz2peyr61urX1+T4uoSBGHmDbDTph0oXI9tBE9SuQdph:NDhxf8Qn0tYUbJh94ZuQdpqKmY7

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks