General

  • Target

    Robux.exe

  • Size

    45KB

  • Sample

    240808-z62rvatemd

  • MD5

    19a2f0fcb384b31f246fab43cb8446d7

  • SHA1

    95fd873a00c547b4720456f280e9024d1b4980e2

  • SHA256

    8d0d2a0c6e54610058b903b773d0f5e0f8e294312b3b02737223db0c8f599344

  • SHA512

    af719eeb5b9c078c23e90cb5c7ad3eefd33efa4d13da491659c63bd712a8ac5bb5b2bddffd535821817066112b772d9bdecc5d53377deec8052bd4483a2c54b9

  • SSDEEP

    768:Cu/dRTUo0HQbWUnmjSmo2qMueeXKSocbbbQtN8/nPI6kzjbGgX3ir/pwIZBDZ2x:Cu/dRTUPE27eH2tNKA6k3bZXSrHd2x

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

127.0.0.1:6606

127.0.0.1:7707

127.0.0.1:8808

Mutex

gY12qkvJtnRz

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Robux.exe

    • Size

      45KB

    • MD5

      19a2f0fcb384b31f246fab43cb8446d7

    • SHA1

      95fd873a00c547b4720456f280e9024d1b4980e2

    • SHA256

      8d0d2a0c6e54610058b903b773d0f5e0f8e294312b3b02737223db0c8f599344

    • SHA512

      af719eeb5b9c078c23e90cb5c7ad3eefd33efa4d13da491659c63bd712a8ac5bb5b2bddffd535821817066112b772d9bdecc5d53377deec8052bd4483a2c54b9

    • SSDEEP

      768:Cu/dRTUo0HQbWUnmjSmo2qMueeXKSocbbbQtN8/nPI6kzjbGgX3ir/pwIZBDZ2x:Cu/dRTUPE27eH2tNKA6k3bZXSrHd2x

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

MITRE ATT&CK Enterprise v15

Tasks