General

  • Target

    48797683f65af9d4fd22215b78d29fa572526d362c798fba3f1369a2175e9485.exe

  • Size

    51KB

  • Sample

    241115-tnrw2axcle

  • MD5

    5ea49370bd4faa70303a04427c3f92e3

  • SHA1

    441446001f2bd06f2412bbfe35bda1a816568eeb

  • SHA256

    48797683f65af9d4fd22215b78d29fa572526d362c798fba3f1369a2175e9485

  • SHA512

    582dc603b5bd5b8fd9c9c78264134965cea2c79246ab4db67bb58d6867c1ed86d0740e01069f6b3a9140a845bf5d442a4b9887bc386772d5bc8c1d54a4cf643b

  • SSDEEP

    1536:Fau/dRTUPE2VIm8UlX0nbbOrYmPs23Xx/dpxI:Eu/DTUPE2VIm8QX0nbbksE/PxI

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

45.141.215.18:6606

Mutex

3kcW0vTGLmp6

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      48797683f65af9d4fd22215b78d29fa572526d362c798fba3f1369a2175e9485.exe

    • Size

      51KB

    • MD5

      5ea49370bd4faa70303a04427c3f92e3

    • SHA1

      441446001f2bd06f2412bbfe35bda1a816568eeb

    • SHA256

      48797683f65af9d4fd22215b78d29fa572526d362c798fba3f1369a2175e9485

    • SHA512

      582dc603b5bd5b8fd9c9c78264134965cea2c79246ab4db67bb58d6867c1ed86d0740e01069f6b3a9140a845bf5d442a4b9887bc386772d5bc8c1d54a4cf643b

    • SSDEEP

      1536:Fau/dRTUPE2VIm8UlX0nbbOrYmPs23Xx/dpxI:Eu/DTUPE2VIm8QX0nbbksE/PxI

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

MITRE ATT&CK Enterprise v15

Tasks