General

  • Target

    e9837fc1d609e0084452590c09746a89af73ec6abf45a26ab58a4d48c9ebceac.exe

  • Size

    1007KB

  • Sample

    240803-cv2w5szerp

  • MD5

    c1619d951b039ce9cb600815e8b14b26

  • SHA1

    4def66d57b972beb3065a29ed1fe88610943d383

  • SHA256

    e9837fc1d609e0084452590c09746a89af73ec6abf45a26ab58a4d48c9ebceac

  • SHA512

    c1f071ab1cbe2e12576227a69618f2a717d49c6fa632280b2d769c53c1c8d89bfe51bd524f5aed13fb67d84109e4aa99ec05d96a589284f275135f036bdb2edc

  • SSDEEP

    24576:heAy4u8ZernsYvWwUIGOh5rE1xrJK06WwkS9Ev95FZCyGWsfe:Iyern6VIVqxrJ5KyvVZCyGWsfe

Malware Config

Targets

    • Target

      e9837fc1d609e0084452590c09746a89af73ec6abf45a26ab58a4d48c9ebceac.exe

    • Size

      1007KB

    • MD5

      c1619d951b039ce9cb600815e8b14b26

    • SHA1

      4def66d57b972beb3065a29ed1fe88610943d383

    • SHA256

      e9837fc1d609e0084452590c09746a89af73ec6abf45a26ab58a4d48c9ebceac

    • SHA512

      c1f071ab1cbe2e12576227a69618f2a717d49c6fa632280b2d769c53c1c8d89bfe51bd524f5aed13fb67d84109e4aa99ec05d96a589284f275135f036bdb2edc

    • SSDEEP

      24576:heAy4u8ZernsYvWwUIGOh5rE1xrJK06WwkS9Ev95FZCyGWsfe:Iyern6VIVqxrJ5KyvVZCyGWsfe

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks