General

  • Target

    a180c575505893f3ff42b31bc0909b773f18515b72e4cbeb2b3fc72c48822acd.exe

  • Size

    90KB

  • Sample

    241122-yrjgaatmdj

  • MD5

    fa9a35aa46e8125410e19919c5007d1d

  • SHA1

    fecb72b3eef590a364f2a5c8079d9dc8c8bbebd4

  • SHA256

    a180c575505893f3ff42b31bc0909b773f18515b72e4cbeb2b3fc72c48822acd

  • SHA512

    b809aabafc3112277c164b35a39b7641529cc27d74e608a408f72244f1c658274a208d56abccde964b1d9c5458f6e7bb367c38f04f984465c4fa57a6ef37fefd

  • SSDEEP

    1536:UMDWyMQnnneVAefyEQmMj99uazMY2cCStPuShSdN20QylgNOmmWB+ByNfu6:UMDWypeVA+yE4hpMBcFwLdkRqgNOmmWD

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

3

C2

138.68.81.155:2301

Mutex

2W4KFQzXfKnZ

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      a180c575505893f3ff42b31bc0909b773f18515b72e4cbeb2b3fc72c48822acd.exe

    • Size

      90KB

    • MD5

      fa9a35aa46e8125410e19919c5007d1d

    • SHA1

      fecb72b3eef590a364f2a5c8079d9dc8c8bbebd4

    • SHA256

      a180c575505893f3ff42b31bc0909b773f18515b72e4cbeb2b3fc72c48822acd

    • SHA512

      b809aabafc3112277c164b35a39b7641529cc27d74e608a408f72244f1c658274a208d56abccde964b1d9c5458f6e7bb367c38f04f984465c4fa57a6ef37fefd

    • SSDEEP

      1536:UMDWyMQnnneVAefyEQmMj99uazMY2cCStPuShSdN20QylgNOmmWB+ByNfu6:UMDWypeVA+yE4hpMBcFwLdkRqgNOmmWD

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks