General

  • Target

    5e2d07add38b1ce755a1ea9292b94d4d_JaffaCakes118

  • Size

    222KB

  • Sample

    241019-xqf44avcpl

  • MD5

    5e2d07add38b1ce755a1ea9292b94d4d

  • SHA1

    d98140911ed25c0d0fdf2fce048e58225eb401dd

  • SHA256

    5acf19bc4f149128aa1cdf3230a3f750589ce465ee4ece2d0bc8fcbc7c2d89fa

  • SHA512

    c90a07bdb7cfc1eb6a27b4e1b42713792b0d06387249526076f3910bdcb46cd28b1e1b8b1999e42c94fdd666cdc45ea632f04d6846c6d1b1888b40f6b94ca7f1

  • SSDEEP

    6144:If82GhNCs6SrBVMmzsb+osoJL3bznvT8b6Ngy:X2iNGkBmn8

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

127.0.0.1:888

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      5e2d07add38b1ce755a1ea9292b94d4d_JaffaCakes118

    • Size

      222KB

    • MD5

      5e2d07add38b1ce755a1ea9292b94d4d

    • SHA1

      d98140911ed25c0d0fdf2fce048e58225eb401dd

    • SHA256

      5acf19bc4f149128aa1cdf3230a3f750589ce465ee4ece2d0bc8fcbc7c2d89fa

    • SHA512

      c90a07bdb7cfc1eb6a27b4e1b42713792b0d06387249526076f3910bdcb46cd28b1e1b8b1999e42c94fdd666cdc45ea632f04d6846c6d1b1888b40f6b94ca7f1

    • SSDEEP

      6144:If82GhNCs6SrBVMmzsb+osoJL3bznvT8b6Ngy:X2iNGkBmn8

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

MITRE ATT&CK Enterprise v15

Tasks