General

  • Target

    95c3158d522f1f0b9b4b58b3dd1a65c2a544658d65fc3d6742e3993a71d632a2

  • Size

    45KB

  • Sample

    241117-s396gstbjk

  • MD5

    2d1a8cd0719c594a339a60f34a3f01dc

  • SHA1

    356c0442c3b2da9679b8ebf5fbe3350610482f2a

  • SHA256

    95c3158d522f1f0b9b4b58b3dd1a65c2a544658d65fc3d6742e3993a71d632a2

  • SHA512

    e13ca67de19a1e9dc94e273d77acfd73cad2afe83068d061228bea2102908e61146d4c4ba61dad74acc2efd97a7285e903b8b029afb623dfc35512b3f04fd021

  • SSDEEP

    768:Qu/dRTUo0HQbWUnmjSmo2qMwKjPGaG6PIyzjbFgX3iNhO8gVGEe+bcjCBDZMg:Qu/dRTUPE2kKTkDy3bCXSK8gVGEe+bcS

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

mtf.wiki:6606

mtf.wiki:7707

mtf.wiki:8808

Mutex

QEmvd7ZEg4eY

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      95c3158d522f1f0b9b4b58b3dd1a65c2a544658d65fc3d6742e3993a71d632a2

    • Size

      45KB

    • MD5

      2d1a8cd0719c594a339a60f34a3f01dc

    • SHA1

      356c0442c3b2da9679b8ebf5fbe3350610482f2a

    • SHA256

      95c3158d522f1f0b9b4b58b3dd1a65c2a544658d65fc3d6742e3993a71d632a2

    • SHA512

      e13ca67de19a1e9dc94e273d77acfd73cad2afe83068d061228bea2102908e61146d4c4ba61dad74acc2efd97a7285e903b8b029afb623dfc35512b3f04fd021

    • SSDEEP

      768:Qu/dRTUo0HQbWUnmjSmo2qMwKjPGaG6PIyzjbFgX3iNhO8gVGEe+bcjCBDZMg:Qu/dRTUPE2kKTkDy3bCXSK8gVGEe+bcS

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

MITRE ATT&CK Enterprise v15

Tasks