General

  • Target

    https://cdn.discordapp.com/attachments/1289360659737477242/1289360966445699194/HydrogenWindows.rar?ex=66fa84b9&is=66f93339&hm=93e64b928a63aede463662192f19fd871f9a3e80ce6497bdf96e72b1bfdbc79f&

  • Sample

    240929-vlv2cawcrh

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

95.49.247.223:6606

95.49.247.223:7707

95.49.247.223:8808

Mutex

WxcJBmYe1F7e

Attributes
  • delay

    3

  • install

    false

  • install_file

    Client2.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      https://cdn.discordapp.com/attachments/1289360659737477242/1289360966445699194/HydrogenWindows.rar?ex=66fa84b9&is=66f93339&hm=93e64b928a63aede463662192f19fd871f9a3e80ce6497bdf96e72b1bfdbc79f&

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks