General

  • Target

    ed4147d98be67528742f4bc25756888e64ca865677ba360764e664adbb629507

  • Size

    7.8MB

  • Sample

    241008-f3tghs1cmp

  • MD5

    a4a2f4b2f79c5017f050e8aa18eda600

  • SHA1

    c70dd294d281bca6f4ad9d45c55fc19087f935d0

  • SHA256

    ed4147d98be67528742f4bc25756888e64ca865677ba360764e664adbb629507

  • SHA512

    a7832681eb7edd0631e271c1207316c5f8ecb54e1f9dc8c1efada5e6f696b1dc67efaba7103ad6958b73eb5a489fe7a49796d866ce09437c73cd232acd8e8f2f

  • SSDEEP

    196608:WMCEmN0NVEyXMCHGLLc54i1wN+yjXx5nDasqWQ2dTNUGk6ulx+iITxavM:/C0NVEyXMCHWUjKjx5WsqWxThuaT8U

Malware Config

Extracted

Family

asyncrat

Version

PortHack 1.0.0

Botnet

Default

C2

127.0.0.1:8848

127.0.0.1:80

127.0.0.1:59196

113.219.237.106:8848

113.219.237.106:80

113.219.237.106:59196

Mutex

DcRatMutex

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      ed4147d98be67528742f4bc25756888e64ca865677ba360764e664adbb629507

    • Size

      7.8MB

    • MD5

      a4a2f4b2f79c5017f050e8aa18eda600

    • SHA1

      c70dd294d281bca6f4ad9d45c55fc19087f935d0

    • SHA256

      ed4147d98be67528742f4bc25756888e64ca865677ba360764e664adbb629507

    • SHA512

      a7832681eb7edd0631e271c1207316c5f8ecb54e1f9dc8c1efada5e6f696b1dc67efaba7103ad6958b73eb5a489fe7a49796d866ce09437c73cd232acd8e8f2f

    • SSDEEP

      196608:WMCEmN0NVEyXMCHGLLc54i1wN+yjXx5nDasqWQ2dTNUGk6ulx+iITxavM:/C0NVEyXMCHWUjKjx5WsqWxThuaT8U

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

    • Loads dropped DLL

MITRE ATT&CK Matrix

Tasks