Overview

overview

10

Static

static

10

Anarchy Panel.exe

windows11-21h2-x64

10

Resubmissions

01-10-2024 16:24

241001-twvynayfpr 10

27-09-2024 00:57

240927-bawzqaxamj 10

26-09-2024 23:29

240926-3gqj3awfpc 10

26-09-2024 18:54

240926-xkc59avhjh 10

26-09-2024 18:38

240926-w945lavbqe 10

26-09-2024 16:26

240926-txsvpazdng 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Toolz (astro).zip

  • Size

    161.1MB

  • Sample

    241001-twvynayfpr

  • MD5

    103e93f9408f4195f294dc1aea765604

  • SHA1

    6e25051cb67851af85c1df5d1b91a90321e0957e

  • SHA256

    110fd83bdeee1785c51b4ae919ea9aabffe74dfd9014a42577bb5ede476ea58a

  • SHA512

    99dc616c28b3389bf4c5b49eaa5cb2f91eaeb0c9a22147a5da5bbe9e1dc061410f90ebc8e0064a4a070faba40448b551278cc578fa8dea638f9e45a27cbcdf56

  • SSDEEP

    3145728:sZparHZgZR/+0kZSi9vkbRNjX8GXKXaU5OgTbt+J7y+rL58Nj6m+ctQ+xhZJZSrl:6oGZp+0kut2OgTIJ7y+rL5oxaNb

Score
10/10
asyncratstealeriumstormkittydefaultdiscoveryrat

Malware Config

Extracted

Family

asyncrat

Botnet

Default

C2

127.0.0.1:3232

Attributes
  • delay

    1

  • install

    true

  • install_file

    steam.exe

  • install_folder

    %AppData%

aes.plain
aes.plain

Targets

    • Target

      Anarchy Panel.exe

    • Size

      54.6MB

    • MD5

      94bac1a0cc0dbac256f0d3b4c90648c2

    • SHA1

      4abcb8a31881e88322f6a37cbb24a14a80c6eef2

    • SHA256

      50c2dba1d961e09cb8df397b71bd3b6a32d0ee6dbe886e7309305dc4ba968f94

    • SHA512

      30ecee38d5d641abaf73e09a23c614cb3b8b84aa1f8ff1818e92c1f2b51bf6841d3e51564aecb5efd01a3d98db88f0938e7dd4ee9c74ca5477785c33c969ffd9

    • SSDEEP

      786432:RvcKHU1yll1EcgYwm/7hPo9b9DMs2PTUpRYj:lPU4bZwm/NwEIYj

    Score
    10/10
    asyncratdefaultdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks