Overview

overview

10

Static

static

10

Anarchy Panel.exe

windows11-21h2-x64

10

Resubmissions

13/01/2025, 00:14

250113-ajgeysynen10

01/10/2024, 16:24

241001-twvynayfpr10

27/09/2024, 00:57

240927-bawzqaxamj10

26/09/2024, 23:29

240926-3gqj3awfpc10

26/09/2024, 18:54

240926-xkc59avhjh10

26/09/2024, 18:38

240926-w945lavbqe10

26/09/2024, 16:26

240926-txsvpazdng10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Toolz (astro).zip
  • Size 161.1MB
  • Sample241001-twvynayfpr
  • SHA256 110fd83bdeee1785c51b4ae919ea9aabffe74dfd9014a42577bb5ede476ea58a
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
asyncratstealeriumstormkittydefaultdiscoveryrat

Malware Config

Extracted

Family

  • asyncrat

Botnet

  • Default

C2

  • 127.0.0.1:3232

Attributes
  • delay

    1

  • install

    true

  • install_file

    steam.exe

  • install_folder

    %AppData%

aes.plain
aes.plain

Targets

    • Target
      Anarchy Panel.exe
    • Size 54.6MB
    • SHA256 50c2dba1d961e09cb8df397b71bd3b6a32d0ee6dbe886e7309305dc4ba968f94
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks