Overview

overview

10

Static

static

3

2f7c56725e...18.exe

windows7-x64

10

2f7c56725e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2f7c56725edd95e9583197a7edc6d8d2_JaffaCakes118

  • Size

    91KB

  • Sample

    241009-mh7a7stgrb

  • MD5

    2f7c56725edd95e9583197a7edc6d8d2

  • SHA1

    bfd32f963c49656b7ba0a8204e57ed58d8b6cd81

  • SHA256

    51ad998f3a847685ef42e7f85f11852d3a90939cb4d7166d7bc002f0ec87fce3

  • SHA512

    749c3c05dab9224d8234243fca7fe7b2af814778652b2d3e915b15b2abf6f23064daa3218e47c69af462772c89caa0ea424399bc85d7454175357432f4f7ad29

  • SSDEEP

    1536:HTVckhKYIj91aCnBbZ6geIWwYVxf2DfB370lGuKnkbrEgCgqULd6pXGTZcq:HTVckhKJaWbZ6geIWFx253QGuKnkbr7l

Score
10/10
asyncratdiscoveryrat

Malware Config

Targets

    • Target

      2f7c56725edd95e9583197a7edc6d8d2_JaffaCakes118

    • Size

      91KB

    • MD5

      2f7c56725edd95e9583197a7edc6d8d2

    • SHA1

      bfd32f963c49656b7ba0a8204e57ed58d8b6cd81

    • SHA256

      51ad998f3a847685ef42e7f85f11852d3a90939cb4d7166d7bc002f0ec87fce3

    • SHA512

      749c3c05dab9224d8234243fca7fe7b2af814778652b2d3e915b15b2abf6f23064daa3218e47c69af462772c89caa0ea424399bc85d7454175357432f4f7ad29

    • SSDEEP

      1536:HTVckhKYIj91aCnBbZ6geIWwYVxf2DfB370lGuKnkbrEgCgqULd6pXGTZcq:HTVckhKJaWbZ6geIWFx253QGuKnkbr7l

    Score
    10/10
    asyncratdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks