General

  • Target

    66d815d755886b1ee38e68d899503249768b8dcf9008d35c8fa89fa35e44141d.exe

  • Size

    45KB

  • Sample

    240821-b5ezpatgkf

  • MD5

    b20888404c5656c4e63ac382a85d673f

  • SHA1

    0b9c972399959f45efae01669ef94d4da395499a

  • SHA256

    66d815d755886b1ee38e68d899503249768b8dcf9008d35c8fa89fa35e44141d

  • SHA512

    741234851f71d09e00bb99270a2ee63c2a75010f08a4ef4138807f6adb997796a6d79cabe0b1556c55b0c608affc4fc8045f66d47ce7086c766a6692c5eb295c

  • SSDEEP

    768:muMmi+TXEFlvWUjVSNmo2qzohumQ6dnQcIPIoVzjbVgX3i44PrRvHbD3Eo+2oBD3:muMmi+TXGk2B+6tltoV3byXSXhQosdfx

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Putty

C2

krecgh.4cloud.click:6943

Mutex

OjZL4DoWlVCn

Attributes
  • delay

    3

  • install

    false

  • install_file

    Automatic Settings.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      66d815d755886b1ee38e68d899503249768b8dcf9008d35c8fa89fa35e44141d.exe

    • Size

      45KB

    • MD5

      b20888404c5656c4e63ac382a85d673f

    • SHA1

      0b9c972399959f45efae01669ef94d4da395499a

    • SHA256

      66d815d755886b1ee38e68d899503249768b8dcf9008d35c8fa89fa35e44141d

    • SHA512

      741234851f71d09e00bb99270a2ee63c2a75010f08a4ef4138807f6adb997796a6d79cabe0b1556c55b0c608affc4fc8045f66d47ce7086c766a6692c5eb295c

    • SSDEEP

      768:muMmi+TXEFlvWUjVSNmo2qzohumQ6dnQcIPIoVzjbVgX3i44PrRvHbD3Eo+2oBD3:muMmi+TXGk2B+6tltoV3byXSXhQosdfx

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

MITRE ATT&CK Enterprise v15

Tasks