General

  • Target

    1496-16-0x0000000000080000-0x0000000000092000-memory.dmp

  • Size

    72KB

  • Sample

    241112-xcdf2syeme

  • MD5

    6ae8215709ba7383122aa0231f625dcc

  • SHA1

    e6fbf54660f59b889ae25473ca92d4ce9bbc5210

  • SHA256

    c458542ef028774c84cae952d55a9009ab2ffdf5d8433f9ff682a912f19d16a3

  • SHA512

    8063bc5e67791e6640cbaa12342e426558dad31ae2ba96565e17c5db22074832c459f161a3f8d5e97006d8ebbcea79b17902a24b43fe734b5a02563f28e3b3b3

  • SSDEEP

    768:bzhcILg4Xf+piPXPaRD9SBiu3bwYbJgedS6+eQvEgK/JwZVc6KN:bzfpnqUx3bfbG36+eQnkJwZVclN

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

FUEGOOO

C2

octubre212024.giize.com:2525

fuertefuerte.accesscam.org:2525

octubre242024.casacam.net:2525

castanojulian1111.chickenkiller.com:2525

uego.con-ip.com:2525

Mutex

DcRatMutex_qwqdanchun

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      1496-16-0x0000000000080000-0x0000000000092000-memory.dmp

    • Size

      72KB

    • MD5

      6ae8215709ba7383122aa0231f625dcc

    • SHA1

      e6fbf54660f59b889ae25473ca92d4ce9bbc5210

    • SHA256

      c458542ef028774c84cae952d55a9009ab2ffdf5d8433f9ff682a912f19d16a3

    • SHA512

      8063bc5e67791e6640cbaa12342e426558dad31ae2ba96565e17c5db22074832c459f161a3f8d5e97006d8ebbcea79b17902a24b43fe734b5a02563f28e3b3b3

    • SSDEEP

      768:bzhcILg4Xf+piPXPaRD9SBiu3bwYbJgedS6+eQvEgK/JwZVc6KN:bzfpnqUx3bfbG36+eQnkJwZVclN

    Score
    1/10

MITRE ATT&CK Matrix

Tasks