Overview

overview

10

Static

static

3

Polymorphic.exe

windows10-2004-x64

10

Polymorphic.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Polymorphic.exe

  • Size

    351KB

  • Sample

    240820-a9flcavgjf

  • MD5

    b08c21220b8323782f548f39fb22a4c9

  • SHA1

    e084a5df54a6263a066e5cf39ccac8204806439d

  • SHA256

    8f2f2def943cf62e17ac13a41bd26d62b229be16646743f5b1fc15b84a7f3566

  • SHA512

    25e5c6297c14f9a91a21f05417988302ba48ca20e2fc3c41bd31ac41b127886d71808ea9a20e5bce893736ed6c2553d8fdbe989bbe7c762577357ce98571374f

  • SSDEEP

    6144:NplaOlikgZtG1dw9VvQzJko2ggKXAs/NOXs05q9:NyxH6K9BIJkoOKXACI8t

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

Default

C2

127.0.0.1:8848

Mutex

DcRatMutex_qwqdanchun

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Polymorphic.exe

    • Size

      351KB

    • MD5

      b08c21220b8323782f548f39fb22a4c9

    • SHA1

      e084a5df54a6263a066e5cf39ccac8204806439d

    • SHA256

      8f2f2def943cf62e17ac13a41bd26d62b229be16646743f5b1fc15b84a7f3566

    • SHA512

      25e5c6297c14f9a91a21f05417988302ba48ca20e2fc3c41bd31ac41b127886d71808ea9a20e5bce893736ed6c2553d8fdbe989bbe7c762577357ce98571374f

    • SSDEEP

      6144:NplaOlikgZtG1dw9VvQzJko2ggKXAs/NOXs05q9:NyxH6K9BIJkoOKXACI8t

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks