General

  • Target

    NuclearRat.exe.1.8.exe

  • Size

    76KB

  • Sample

    241016-vm8c3avdqp

  • MD5

    eec7a5928ec96c9f2733d328aa3d30fc

  • SHA1

    4f9d8ace1f5407ee6c5ba4e2947b53a12cb0721a

  • SHA256

    a1155e2b51e2f8baeed2992b17329108cddc45faf19ac0024cd5efd002f030ad

  • SHA512

    25e340a57913f01474919d0cff6b0785cc53614ec9e215f99505e6347fa0060ed8f40337233bf9e2b1f28cf26c43813d3e1e4aa08f222df9294552a7aac23275

  • SSDEEP

    1536:0OtmnlcQzbjt0zkAnkJYuNWjK4a2h6HLdzZWOGM41JMZVclN:ZtmnSQzbjt0w0bjsdMOGjMzY

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

Default

C2

127.0.0.1:8848

Mutex

DcRatMutex_qwqdanchun

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      NuclearRat.exe.1.8.exe

    • Size

      76KB

    • MD5

      eec7a5928ec96c9f2733d328aa3d30fc

    • SHA1

      4f9d8ace1f5407ee6c5ba4e2947b53a12cb0721a

    • SHA256

      a1155e2b51e2f8baeed2992b17329108cddc45faf19ac0024cd5efd002f030ad

    • SHA512

      25e340a57913f01474919d0cff6b0785cc53614ec9e215f99505e6347fa0060ed8f40337233bf9e2b1f28cf26c43813d3e1e4aa08f222df9294552a7aac23275

    • SSDEEP

      1536:0OtmnlcQzbjt0zkAnkJYuNWjK4a2h6HLdzZWOGM41JMZVclN:ZtmnSQzbjt0w0bjsdMOGjMzY

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

MITRE ATT&CK Matrix

Tasks