General

  • Target

    AutismLoader.exe

  • Size

    5.0MB

  • Sample

    241123-3v5wxasrfs

  • MD5

    9ce1df7933ead3d9ec7e022852c64223

  • SHA1

    9bfa390b33e3400eeb7f052a3d69f6770da914cc

  • SHA256

    b8a3e90b9388d92a257974f2d5c1724ab2806b0409d375a975e5944a6bc90bf8

  • SHA512

    181812045a06d09464e9e254127cae46599db9797d4bf4e1d43be250e8a1bfaae3e135bc7271d7f670eb05f66a96172073ee30c33d3f1575ff7f421942b122e2

  • SSDEEP

    768:99H1Fn3n9P78zQC8A+XvSEqLDkvB3E1+T4jSBGHmDbDNphAoXHv8D9GSuwdpqKYC:TX9x6lsxEsYUb/hxPSxuwdpqKmY7

Score
10/10

Malware Config

Extracted

Family

asyncrat

Botnet

Victim

C2

193.161.193.99:36700

Attributes
  • delay

    1

  • install

    true

  • install_file

    syskyvalor.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      AutismLoader.exe

    • Size

      5.0MB

    • MD5

      9ce1df7933ead3d9ec7e022852c64223

    • SHA1

      9bfa390b33e3400eeb7f052a3d69f6770da914cc

    • SHA256

      b8a3e90b9388d92a257974f2d5c1724ab2806b0409d375a975e5944a6bc90bf8

    • SHA512

      181812045a06d09464e9e254127cae46599db9797d4bf4e1d43be250e8a1bfaae3e135bc7271d7f670eb05f66a96172073ee30c33d3f1575ff7f421942b122e2

    • SSDEEP

      768:99H1Fn3n9P78zQC8A+XvSEqLDkvB3E1+T4jSBGHmDbDNphAoXHv8D9GSuwdpqKYC:TX9x6lsxEsYUb/hxPSxuwdpqKmY7

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks