General

  • Target

    51780a91bc216ba6305031733f3d2a95a0165baba51f3c6657d3cdc4a9d91b61.tar

  • Size

    4.7MB

  • Sample

    241119-e3pmwsznht

  • MD5

    922abc1ecaeb8aa2c239eb1802efa9bd

  • SHA1

    7b368f693ae2749e26d13ca95a7421ffc4dd6d8a

  • SHA256

    51780a91bc216ba6305031733f3d2a95a0165baba51f3c6657d3cdc4a9d91b61

  • SHA512

    f34af336a942990831d8ded7e9d7487356529dfdad55eabb5c551f0a83050f26be9b7282caf73368e512213db6bc734b34105fa4531e8760d6f2e96d37d1982d

  • SSDEEP

    98304:2baMbXbE/I/SnwrQEQusdm66l2u45UNYFrkvz29kdJcjdsBKMa50wHy:EbrprRNkm6w2u45UNSwvz1Jcj+BW59H

Malware Config

Extracted

Family

asyncrat

Version

| CRACKED BY https://t.me/xworm_v2

Botnet

FENIX INRY 29

C2

7012oj.duckdns.org:9003

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      OFICIO DE NOTIFICACIÓN EJECTRÓNICA CENDO RAMA JUDICIAL DE LA REPÚBLICA DE COLOMBIA/00029 NotifiacionElectronica.exe

    • Size

      2.2MB

    • MD5

      d9530ecee42acccfd3871672a511bc9e

    • SHA1

      89b4d2406f1294bd699ef231a4def5f495f12778

    • SHA256

      81e04f9a131534acc0e9de08718c062d3d74c80c7f168ec7e699cd4b2bd0f280

    • SHA512

      d5f048ea995affdf9893ec4c5ac5eb188b6714f5b6712e0b5a316702033421b145b8ee6a62d303eb4576bf8f57273ff35c5d675807563a31157136f79d8a9980

    • SSDEEP

      49152:rHOut2Bf0ajIM8XEEN6N0rE/I/vqn7krQEQusd5F:VbaMbXbE/I/SnwrQEQusd/

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Suspicious use of SetThreadContext

    • Target

      OFICIO DE NOTIFICACIÓN EJECTRÓNICA CENDO RAMA JUDICIAL DE LA REPÚBLICA DE COLOMBIA/d3dx9_43.dll

    • Size

      1.9MB

    • MD5

      d87de826ca653d3bfe426337eadc0ee3

    • SHA1

      6b2b89a1c20912ba848777722e49978443cc4b80

    • SHA256

      6f0b9e1f52998e21db8b5a07305d93e699e9e766c0d04403f436e2551946701e

    • SHA512

      06faa842aab3ffe9fab4fc84951bbb38d499a1b0220cd4924571359521069ff2c56e702d640331dbf3b7feb59e67140bbf310f7c983918da8cde299f61432c67

    • SSDEEP

      24576:QtU6OIyl2Wy9M3bJ45fPS0zFZghQ6aOiFaKOE31GrvFXl74YZ29X1MDd6olmrBFl:t66l2u45BiNYFrz31Cv3D29kd6kcf

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks