General

  • Target

    Infected.exe

  • Size

    63KB

  • Sample

    241116-2adq9ayqgj

  • MD5

    d8b95ef7f055c18b0716f7cdc84fcdcd

  • SHA1

    7fd845c18dae16b9c75cc0fdf62000b3ea4ea2c6

  • SHA256

    6c5c5da74a2c9f34aa20c2e769e8a935b727714964c05401e34283b6238f827b

  • SHA512

    ba87527da75b06f7e82bffb00ce46642d44c38f39574ee9edbe05bec682af5e2baa44d1ffa40660713745919a4b9ddab265b9ff87cb3a1c9c6c5b35d93f32dca

  • SSDEEP

    768:WtoQVuOPx178nkC8A+XImazcBRL5JTk1+T4KSBGHmDbD/ph0oXfjkykdVYSucdph:WVxXHdSJYUbdh9fjBkdNucdpqKmY7

Malware Config

Extracted

Family

asyncrat

Botnet

Default

C2

127.0.0.1:3232

Attributes
  • delay

    1

  • install

    true

  • install_file

    Collapse.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Infected.exe

    • Size

      63KB

    • MD5

      d8b95ef7f055c18b0716f7cdc84fcdcd

    • SHA1

      7fd845c18dae16b9c75cc0fdf62000b3ea4ea2c6

    • SHA256

      6c5c5da74a2c9f34aa20c2e769e8a935b727714964c05401e34283b6238f827b

    • SHA512

      ba87527da75b06f7e82bffb00ce46642d44c38f39574ee9edbe05bec682af5e2baa44d1ffa40660713745919a4b9ddab265b9ff87cb3a1c9c6c5b35d93f32dca

    • SSDEEP

      768:WtoQVuOPx178nkC8A+XImazcBRL5JTk1+T4KSBGHmDbD/ph0oXfjkykdVYSucdph:WVxXHdSJYUbdh9fjBkdNucdpqKmY7

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Async RAT payload

    • Downloads MZ/PE file

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks