General

  • Target

    6d1dab1d4a945580617f762b3c23a6b0N.exe

  • Size

    63KB

  • Sample

    240805-j9ztnavenb

  • MD5

    6d1dab1d4a945580617f762b3c23a6b0

  • SHA1

    28d17e16d274687851892790a0e3b8dbdd3c1372

  • SHA256

    689733b311d3c8412e007386a5d88e50a566ed2d5b2df97d0fc4aa7cfd562384

  • SHA512

    fe84ba4ab3352118dcfb9b863b246b8d60ac8218f7c96e584f3877858fd6fd173211883dcff66f8347df00cf6e99e9afa41ebf5c1ff87abe4c6a33a7ce49aaf1

  • SSDEEP

    1536:AhthBLTRQUhZ4DcVdReeiIVrGbbXwyTQeZvGGDpqKmY7:AhthBLTRQUhZ4idUeXGbbXjTQIHgz

Malware Config

Extracted

Family

asyncrat

Version

5.0.5

Botnet

Venom Clients

C2

91.92.242.59:4449

Mutex

jemhrguergmuju388mug

Attributes
  • delay

    1

  • install

    true

  • install_file

    Lol.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      6d1dab1d4a945580617f762b3c23a6b0N.exe

    • Size

      63KB

    • MD5

      6d1dab1d4a945580617f762b3c23a6b0

    • SHA1

      28d17e16d274687851892790a0e3b8dbdd3c1372

    • SHA256

      689733b311d3c8412e007386a5d88e50a566ed2d5b2df97d0fc4aa7cfd562384

    • SHA512

      fe84ba4ab3352118dcfb9b863b246b8d60ac8218f7c96e584f3877858fd6fd173211883dcff66f8347df00cf6e99e9afa41ebf5c1ff87abe4c6a33a7ce49aaf1

    • SSDEEP

      1536:AhthBLTRQUhZ4DcVdReeiIVrGbbXwyTQeZvGGDpqKmY7:AhthBLTRQUhZ4idUeXGbbXjTQIHgz

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

MITRE ATT&CK Matrix

Tasks