General

  • Target

    783739f29d9aa60f3a994b8f01b67dd3_JaffaCakes118

  • Size

    222KB

  • Sample

    241028-hfbpaszrbz

  • MD5

    783739f29d9aa60f3a994b8f01b67dd3

  • SHA1

    b962b5b1f95113041cdf3dc5f3708583478a98ec

  • SHA256

    3b4ba213d134f8e5dafd22a58586accd31697fa0b88fec934e39d5fe9b933aa1

  • SHA512

    8b8e0a7979593b57af115da90dbe0707b2536ecfcc894a41512a9d21ad04d99f77dae6acc0950b107e1a4d7d0d0292d74d25f30b4edabcbf6e1c4297a3c0d4a8

  • SSDEEP

    6144:JX2GhN4s6SrBVMmzsb+osoJL3bznvT8b6Ngy:t2iNIkBmn8

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

127.0.0.1:888

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      783739f29d9aa60f3a994b8f01b67dd3_JaffaCakes118

    • Size

      222KB

    • MD5

      783739f29d9aa60f3a994b8f01b67dd3

    • SHA1

      b962b5b1f95113041cdf3dc5f3708583478a98ec

    • SHA256

      3b4ba213d134f8e5dafd22a58586accd31697fa0b88fec934e39d5fe9b933aa1

    • SHA512

      8b8e0a7979593b57af115da90dbe0707b2536ecfcc894a41512a9d21ad04d99f77dae6acc0950b107e1a4d7d0d0292d74d25f30b4edabcbf6e1c4297a3c0d4a8

    • SSDEEP

      6144:JX2GhN4s6SrBVMmzsb+osoJL3bznvT8b6Ngy:t2iNIkBmn8

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Async RAT payload

MITRE ATT&CK Enterprise v15

Tasks