General

  • Target

    347321c42945f7b3e7e1ea6cef111680N.exe

  • Size

    45KB

  • Sample

    240805-cgy84axfqh

  • MD5

    347321c42945f7b3e7e1ea6cef111680

  • SHA1

    990b2e6dfb3e113796c9c9bea931340f770db1bd

  • SHA256

    cf4ceb78598e3195dfeb1194d0c6ec444177435f1c2e83a29d708445368ecf2d

  • SHA512

    37b0c16b9e3401fee6d4d3482f09efb5c899093da1f123f00786171e9606765295ec277bd8721a996d649f2a1eafa02fe48d1450ab1e6ee6ed3ae1d74be19de5

  • SSDEEP

    768:mu/dRTUo0HQbWUnmjSmo2qMwKjPGaG6PIyzjbFgX3i1lxj/NNBDZyx:mu/dRTUPE2kKTkDy3bCXS1fNdyx

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

127.0.0.1:6606

127.0.0.1:7707

127.0.0.1:8808

Mutex

p5UNMN937a2i

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      347321c42945f7b3e7e1ea6cef111680N.exe

    • Size

      45KB

    • MD5

      347321c42945f7b3e7e1ea6cef111680

    • SHA1

      990b2e6dfb3e113796c9c9bea931340f770db1bd

    • SHA256

      cf4ceb78598e3195dfeb1194d0c6ec444177435f1c2e83a29d708445368ecf2d

    • SHA512

      37b0c16b9e3401fee6d4d3482f09efb5c899093da1f123f00786171e9606765295ec277bd8721a996d649f2a1eafa02fe48d1450ab1e6ee6ed3ae1d74be19de5

    • SSDEEP

      768:mu/dRTUo0HQbWUnmjSmo2qMwKjPGaG6PIyzjbFgX3i1lxj/NNBDZyx:mu/dRTUPE2kKTkDy3bCXS1fNdyx

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

MITRE ATT&CK Enterprise v15

Tasks