asyncrat

General

Target
03082024_0112_08-CITACION DEMANDA-JUZGADO PENAL 09- RAMA JUDICIAL ESPECIALIZADA.zip
Size 2.7MB
Sample240803-bkpy6asdpe
SHA256 27164ab014dd29fe1a866da3871a93b423e2a91a41bdea14f1694034474ab524
MD5 e36bf54546481fccf6d465e84c492c30
SHA1 2b186e5bd3419b83a92cebd0189039b3a2604ac3
SHA512 bd7de9d50f770aa66664c3abd869b69ead5ec16fad2960084daa3c978981359cf05593da43caa16b68a53db7674cac53e23ce86296728b3906c70cd1788fa8aa
SSDEEP 49152:rSjJB0BZ9D74v5tzVHRrg92Di7SXCGFUaRn5d7/r9rGi/h0CtjvSP5VU5gqgEBS:2j4BWzA9Ci/0tRnBrGi5jJvSBejBS
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Extracted

Family

asyncrat

Version

| CRACKED BY https://t.me/xworm_v2

Botnet

Default

C2

remotald.duckdns.org:8808

Mutex

AsyncMutex_6SI8OkPnk

Attributes

delay
3
install
false
install_folder
%AppData%

aes.plain

Targets

- Target
  08-CITACION DEMANDA-JUZGADO PENAL 09- RAMA JUDICIAL ESPECIALIZADA/04 CITACION DEMANDA.exe
- Size 3.8MB
- SHA256 46d06d06984466e0e8082f8bba8d274c37145ec71f26da0904dd93ea2e7f3087
- MD5 27b6f3b8e8bdce591e5164edba28584d
- SHA1 3a150c9db17a94feddec8268073336d030b97dad
- SHA512 f91aea8e4dc987703926fef287178fc680d450597ad524ea0ca44255c7e3e7127c5dce8362be2f241d7a7aace2b7760467bdfc6117ce467d2bc1459045bb842f
- SSDEEP 49152:QDdgK6jyazbFza8IBn2cpi7cSgWVh07Z2GBc024xF6QKRTTzLAUd+JOugbW:+OK62azbMB2kZ2rUF6QKR3Vd+JAb
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

asyncrat default discovery rat
- AsyncRat
  AsyncRAT is designed to remotely monitor and control other computers written in C#.
  rat asyncrat
- Suspicious use of SetThreadContext
behavioral1 behavioral2
- Target
  08-CITACION DEMANDA-JUZGADO PENAL 09- RAMA JUDICIAL ESPECIALIZADA/ProductStatistics3.dll
- Size 1.1MB
- SHA256 0f6185055c0ab184101832dda9bdca9d99ae64ec796e784a57bdfacd6f4dc0f2
- MD5 99137710087ed494360fce56cec7fa5c
- SHA1 45f9fed20de05ecfb6490d4056b29f0d98d312f1
- SHA512 75633749cb3048fb3016a3a1929862cf77f9a07de0b8d7290aecaaa187f6339efb291c9f6a7341ea4cc7597387d3b730cd119de987f495b58b49b524e195964f
- SSDEEP 24576:8VD9IKosUuI8xDN7J79vro8h+hwO3IMTTEC8k:C7S80qO4MTTuk
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4