Overview

overview

10

Static

static

10

a/external.exe

windows7-x64

10

a/external.exe

windows10-2004-x64

10

external.exe

windows7-x64

10

external.exe

windows10-2004-x64

10

gandras/external.exe

windows7-x64

1

gandras/external.exe

windows10-2004-x64

1

test/external.exe

windows7-x64

10

test/external.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    external.rar

  • Size

    1.9MB

  • Sample

    241020-lyzevssbpa

  • MD5

    92c04903cfc6b347341472b6d7dd853b

  • SHA1

    71ed991509a5926231f02dac502245d74f5b79c9

  • SHA256

    98b5aaed376a001b259d8f661774ddee421848ec7797289407f6b9c96531f44e

  • SHA512

    8db4e169a04bbbb1f070374fa53e10e3849b1384790a814376c798eb1c6671522736b40affd74bcf8079c498c385736520ed2befea7705f05bd8839e0969219a

  • SSDEEP

    49152:fHkQT+z301wVb3l3XYGvAks4Qj2/OTjGMFMys21Eln/Qosacj:MD301Wt4oQ6WWMFMW1Egacj

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Botnet

Default

C2

127.0.0.1:3232

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      a/external.exe

    • Size

      63KB

    • MD5

      0447433dfae1ac5541b97ecd741748e2

    • SHA1

      7b57fb403d446629bbd72d632547c4d25f27a993

    • SHA256

      9a97697b68656797144bb25ad73bf31719f8ae7f28a70bb06a84ad0077d5ad0a

    • SHA512

      4ec5b2f01a880e8995da2130a599ca5973614a11fa964cfd002fe305197ade558470249fa564eecf3d216a8f5e20bc0f9eb2fade30b6f5a92771630b8b66ef08

    • SSDEEP

      768:jnuguX1wbgyX78dIC8A+XkuazcBRL5JTk1+T4KSBGHmDbD/ph0oXtJzm1leSuEdP:rvCCPTDdSJYUbdh9tR2lpuEdpqKmY7

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat
    behavioral1behavioral2

    • Target

      external.exe

    • Size

      63KB

    • MD5

      0447433dfae1ac5541b97ecd741748e2

    • SHA1

      7b57fb403d446629bbd72d632547c4d25f27a993

    • SHA256

      9a97697b68656797144bb25ad73bf31719f8ae7f28a70bb06a84ad0077d5ad0a

    • SHA512

      4ec5b2f01a880e8995da2130a599ca5973614a11fa964cfd002fe305197ade558470249fa564eecf3d216a8f5e20bc0f9eb2fade30b6f5a92771630b8b66ef08

    • SSDEEP

      768:jnuguX1wbgyX78dIC8A+XkuazcBRL5JTk1+T4KSBGHmDbD/ph0oXtJzm1leSuEdP:rvCCPTDdSJYUbdh9tR2lpuEdpqKmY7

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat
    behavioral3behavioral4

    • Target

      gandras/external.exe

    • Size

      3.7MB

    • MD5

      c603b1dc33c3deea5cea00b8c9f8ceca

    • SHA1

      a563ed92a0507bd1877bc751e671ad443870d1d4

    • SHA256

      3fbd8df603b2e56d3bed7ee77ea0ca1ec43ad5b743cae78a07d9dd3dbcd75d0b

    • SHA512

      94c22808691046c426a7d675abfc6c0b99b47a0c4b7b609457891e235ecebf27489e4d8a34bd58515b005ebc3c1b26e7b14c65c44d1189ed844f3f3dbea01108

    • SSDEEP

      49152:Aqqzf9Gg3wtHJEKmrfwJqgUbe4y3VLuxuMvAKrTZrNyAk2dEzkhT8pp0C2:U9Gg6OKiwICjVqxdAGTZ10tT2

    Score
    1/10
    behavioral5behavioral6

    • Target

      test/external.exe

    • Size

      63KB

    • MD5

      0447433dfae1ac5541b97ecd741748e2

    • SHA1

      7b57fb403d446629bbd72d632547c4d25f27a993

    • SHA256

      9a97697b68656797144bb25ad73bf31719f8ae7f28a70bb06a84ad0077d5ad0a

    • SHA512

      4ec5b2f01a880e8995da2130a599ca5973614a11fa964cfd002fe305197ade558470249fa564eecf3d216a8f5e20bc0f9eb2fade30b6f5a92771630b8b66ef08

    • SSDEEP

      768:jnuguX1wbgyX78dIC8A+XkuazcBRL5JTk1+T4KSBGHmDbD/ph0oXtJzm1leSuEdP:rvCCPTDdSJYUbdh9tR2lpuEdpqKmY7

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat
    behavioral7behavioral8

MITRE ATT&CK Matrix

Tasks