Resubmissions

16-08-2024 14:14

240816-rj2jkasfrq 10

16-08-2024 14:09

240816-rghzfayelh 10

General

  • Target

    AsyncClient.exe

  • Size

    47KB

  • Sample

    240816-rghzfayelh

  • MD5

    84ce795a60f779cc933bf3cc6e794fa2

  • SHA1

    a67cbd9ab868d1b07cc882c6235f0f2e4dad0bb9

  • SHA256

    c61af51a2fd8fc0e50206237844a14b5d5fbab5fb9963ac579d292e864f7799d

  • SHA512

    3651fe88baf783f25ae5fad59e24c340895f6db8d0c57497d07cd46681ee7fc94364e436764245c3fad6f4f90414ac21efb66b37ebac0d58a4db31edc2b33bfa

  • SSDEEP

    768:4uk0VT3ongoWU2Gjimo2qrHNxsdukHAlPI+SxRpugo0b7t65XB5QeF/aI9BDZ7x:4uk0VT3Q+2yyN+SxREGb7QnFnd7x

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

127.0.0.1:7707

127.0.0.1:8808

Mutex

rAex1GkFWgUj

Attributes
  • delay

    3

  • install

    true

  • install_file

    hey.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      AsyncClient.exe

    • Size

      47KB

    • MD5

      84ce795a60f779cc933bf3cc6e794fa2

    • SHA1

      a67cbd9ab868d1b07cc882c6235f0f2e4dad0bb9

    • SHA256

      c61af51a2fd8fc0e50206237844a14b5d5fbab5fb9963ac579d292e864f7799d

    • SHA512

      3651fe88baf783f25ae5fad59e24c340895f6db8d0c57497d07cd46681ee7fc94364e436764245c3fad6f4f90414ac21efb66b37ebac0d58a4db31edc2b33bfa

    • SSDEEP

      768:4uk0VT3ongoWU2Gjimo2qrHNxsdukHAlPI+SxRpugo0b7t65XB5QeF/aI9BDZ7x:4uk0VT3Q+2yyN+SxREGb7QnFnd7x

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks