General

  • Target

    bd195ee5812dc58ee5b9b758dd441c5109a49bea4318d220febc8ab56d62df27

  • Size

    6.2MB

  • Sample

    241121-g9xcestpcj

  • MD5

    2f656ac986d1b22de2356fc4586cd819

  • SHA1

    e36341cdc70b4d761ba4ac77e117e1fab0a95ce3

  • SHA256

    bd195ee5812dc58ee5b9b758dd441c5109a49bea4318d220febc8ab56d62df27

  • SHA512

    dabcb2e594897a5b8f30b84d1f0437d46e224c6d9efd825d2a66a3ee64d206e8706eec474e00ec623ba89d34b9cdd33a626283910879d5d0ad6f5efcfc5fcc7d

  • SSDEEP

    196608:xaq5c7YF6mvdsCncW4njQthsiHzy7kZPRJZJJ9yh:PWIPvaCncbnKhs57Wr

Malware Config

Extracted

Family

asyncrat

Botnet

Default

C2

34.92.223.98:4449

Mutex

xetwktjowgokrxw

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      bd195ee5812dc58ee5b9b758dd441c5109a49bea4318d220febc8ab56d62df27

    • Size

      6.2MB

    • MD5

      2f656ac986d1b22de2356fc4586cd819

    • SHA1

      e36341cdc70b4d761ba4ac77e117e1fab0a95ce3

    • SHA256

      bd195ee5812dc58ee5b9b758dd441c5109a49bea4318d220febc8ab56d62df27

    • SHA512

      dabcb2e594897a5b8f30b84d1f0437d46e224c6d9efd825d2a66a3ee64d206e8706eec474e00ec623ba89d34b9cdd33a626283910879d5d0ad6f5efcfc5fcc7d

    • SSDEEP

      196608:xaq5c7YF6mvdsCncW4njQthsiHzy7kZPRJZJJ9yh:PWIPvaCncbnKhs57Wr

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Async RAT payload

    • Loads dropped DLL

MITRE ATT&CK Matrix

Tasks