General

  • Target

    wil25.exe

  • Size

    47KB

  • Sample

    240930-zwnr8sveqj

  • MD5

    21e648cfae4d4cf760a1a415c712df22

  • SHA1

    71f75e83f9512dfdc4ec5d77d57a8b87a877d3e9

  • SHA256

    0bcc2c4d42966857ff5c047308049fe1a7a2b8bf393957fa07c85623488ce50f

  • SHA512

    d484ecd05225b09a4def89d72943f463ea760ba0615fcea5b87db485f9586cba958ac7cc734fb224e4bd3168080e73533843b76258789074619bde619443e743

  • SSDEEP

    768:BCT3ILNCKi+DiP8l5MBN/QisVY8YbPgw7qm7dfqvEgK/JrZVc6KN:BCYmUMiYzb4DginkJrZVclN

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

C2

myhostnamejuly.kozow.com:4503

Mutex

5yubtrvtybve5_qwqdanchun

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      wil25.exe

    • Size

      47KB

    • MD5

      21e648cfae4d4cf760a1a415c712df22

    • SHA1

      71f75e83f9512dfdc4ec5d77d57a8b87a877d3e9

    • SHA256

      0bcc2c4d42966857ff5c047308049fe1a7a2b8bf393957fa07c85623488ce50f

    • SHA512

      d484ecd05225b09a4def89d72943f463ea760ba0615fcea5b87db485f9586cba958ac7cc734fb224e4bd3168080e73533843b76258789074619bde619443e743

    • SSDEEP

      768:BCT3ILNCKi+DiP8l5MBN/QisVY8YbPgw7qm7dfqvEgK/JrZVc6KN:BCYmUMiYzb4DginkJrZVclN

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

MITRE ATT&CK Enterprise v15

Tasks