General

  • Target

    bc48b3506a5e5fcaeb79b4a40afabb2e5405318ccb23d465c193e54ac8374881

  • Size

    240KB

  • Sample

    241020-b23atatalr

  • MD5

    548fa8f694ed1c25c219d93748fb856b

  • SHA1

    e28cbba300e7381a8cc4e548cae6b73c78f939ad

  • SHA256

    bc48b3506a5e5fcaeb79b4a40afabb2e5405318ccb23d465c193e54ac8374881

  • SHA512

    856e8693cf4da203450fc0723a5d51ef0e309629a2101d588d0f00ac8c0368ea8f631dd8cff928cb5311397249db3f6024b6e939a70d9c9b809450ffd54f2da3

  • SSDEEP

    3072:Z/0EX0X/E4r7cu1sF2OhY2czT81/SGZ1s+FWSBz65/M6If+3Js+3JFkKeTn5Nz:N000vXrDsF2MY2cnMVPFWSxBt25i

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

54.253.7.109:4447

Mutex

d5svw6kxmeIc

Attributes
  • delay

    19

  • install

    false

  • install_file

    service.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      bc48b3506a5e5fcaeb79b4a40afabb2e5405318ccb23d465c193e54ac8374881

    • Size

      240KB

    • MD5

      548fa8f694ed1c25c219d93748fb856b

    • SHA1

      e28cbba300e7381a8cc4e548cae6b73c78f939ad

    • SHA256

      bc48b3506a5e5fcaeb79b4a40afabb2e5405318ccb23d465c193e54ac8374881

    • SHA512

      856e8693cf4da203450fc0723a5d51ef0e309629a2101d588d0f00ac8c0368ea8f631dd8cff928cb5311397249db3f6024b6e939a70d9c9b809450ffd54f2da3

    • SSDEEP

      3072:Z/0EX0X/E4r7cu1sF2OhY2czT81/SGZ1s+FWSBz65/M6If+3Js+3JFkKeTn5Nz:N000vXrDsF2MY2cnMVPFWSxBt25i

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

MITRE ATT&CK Matrix

Tasks