General

  • Target

    d866c46d22d40dd924c223eef9b3df4e627405977cd985e8d84b0365f6d3a5daN

  • Size

    63KB

  • Sample

    241108-zjbl5szanf

  • MD5

    2fc3446d9c1763439e845b42abfa2570

  • SHA1

    ffed31233ce25538500cdec6bc01b3b54eb0a80b

  • SHA256

    d866c46d22d40dd924c223eef9b3df4e627405977cd985e8d84b0365f6d3a5da

  • SHA512

    908ce8f28aa4130e70c4c92b5e0924134e6bff41d3240c5e2b6346d57ace5fb09b4b55803c4db567daca8756d9f3248a4164e95e7c75083f0f438bdd8e92c22c

  • SSDEEP

    1536:v1/MnY8XWpTt5EYUbZh9LMUxuwdpqKmY7:vCYzpTteYUbZMUjGz

Score
10/10

Malware Config

Extracted

Family

asyncrat

Botnet

11-4-24

C2

egghold.duckdns.org:2011

exgi.duckdns.org:2011

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      d866c46d22d40dd924c223eef9b3df4e627405977cd985e8d84b0365f6d3a5daN

    • Size

      63KB

    • MD5

      2fc3446d9c1763439e845b42abfa2570

    • SHA1

      ffed31233ce25538500cdec6bc01b3b54eb0a80b

    • SHA256

      d866c46d22d40dd924c223eef9b3df4e627405977cd985e8d84b0365f6d3a5da

    • SHA512

      908ce8f28aa4130e70c4c92b5e0924134e6bff41d3240c5e2b6346d57ace5fb09b4b55803c4db567daca8756d9f3248a4164e95e7c75083f0f438bdd8e92c22c

    • SSDEEP

      1536:v1/MnY8XWpTt5EYUbZh9LMUxuwdpqKmY7:vCYzpTteYUbZMUjGz

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

MITRE ATT&CK Matrix

Tasks