General

  • Target

    6514a658cdfcf26f38c2c876f689816b9bbe7ae5e99b26deac1e34b828aa54e1N.exe

  • Size

    1.4MB

  • Sample

    241123-2e2nwazmev

  • MD5

    85dab64468bc0ddee103db8160d3cd00

  • SHA1

    f4489f4a8286ae13254423a210da77047b256c00

  • SHA256

    6514a658cdfcf26f38c2c876f689816b9bbe7ae5e99b26deac1e34b828aa54e1

  • SHA512

    6ba26a05d27a67ca772ce09ed88c5b14a1635b8dc8dc962ef022b999b4a5a9619f40423e4dc31d44a830a6d6f0b10a7df5adf053f231b416e314bab99052069e

  • SSDEEP

    24576:WR9IYVaFSvVSXKG+SE4LQ/+6pdWS2W6zT9oG9wxsr7AV:q9xYc/+6/WSl6zT9oGH

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

143.198.82.194:6606

Mutex

Zin58gVfSemD

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      6514a658cdfcf26f38c2c876f689816b9bbe7ae5e99b26deac1e34b828aa54e1N.exe

    • Size

      1.4MB

    • MD5

      85dab64468bc0ddee103db8160d3cd00

    • SHA1

      f4489f4a8286ae13254423a210da77047b256c00

    • SHA256

      6514a658cdfcf26f38c2c876f689816b9bbe7ae5e99b26deac1e34b828aa54e1

    • SHA512

      6ba26a05d27a67ca772ce09ed88c5b14a1635b8dc8dc962ef022b999b4a5a9619f40423e4dc31d44a830a6d6f0b10a7df5adf053f231b416e314bab99052069e

    • SSDEEP

      24576:WR9IYVaFSvVSXKG+SE4LQ/+6pdWS2W6zT9oG9wxsr7AV:q9xYc/+6/WSl6zT9oGH

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Async RAT payload

MITRE ATT&CK Enterprise v15

Tasks