General

  • Target

    Polymorphic.exe

  • Size

    261KB

  • Sample

    240803-d1sfbs1hnr

  • MD5

    804b13b01618556c482fbc22c006ea50

  • SHA1

    818a456902411c04e0a3313343c49f40ca6f4230

  • SHA256

    9188647a8083afb376f0205e254e20d977c43f7adb69d148ab6197a386304fa5

  • SHA512

    8b52be9b0398779edede6e94deafd0ca605dd0cc12e36d4e2abf6fb4f292a0135c8b72e4816b26a41e92d453ab02ba54f73b44312798447a6c3f8d25f34080b6

  • SSDEEP

    6144:VfxOlLF56irZVUjR2AoRA6TQhoIU3/IN/3gKXAs/oyaq:n67rTU0zA6EeIUv1KXAC

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

Default

C2

127.0.0.1:8848

Mutex

DcRatMutex_qwqdanchun

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Polymorphic.exe

    • Size

      261KB

    • MD5

      804b13b01618556c482fbc22c006ea50

    • SHA1

      818a456902411c04e0a3313343c49f40ca6f4230

    • SHA256

      9188647a8083afb376f0205e254e20d977c43f7adb69d148ab6197a386304fa5

    • SHA512

      8b52be9b0398779edede6e94deafd0ca605dd0cc12e36d4e2abf6fb4f292a0135c8b72e4816b26a41e92d453ab02ba54f73b44312798447a6c3f8d25f34080b6

    • SSDEEP

      6144:VfxOlLF56irZVUjR2AoRA6TQhoIU3/IN/3gKXAs/oyaq:n67rTU0zA6EeIUv1KXAC

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

MITRE ATT&CK Matrix

Tasks