Overview

overview

10

Static

static

3

00125-ENVI...ON.exe

windows7-x64

10

00125-ENVI...ON.exe

windows10-2004-x64

10

00125-ENVI...lc.dll

windows7-x64

1

00125-ENVI...lc.dll

windows10-2004-x64

1

00125-ENVI...re.dll

windows7-x64

1

00125-ENVI...re.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    23112024_0031_YDRAY-00125-ENVIO-COPIA-DE-LA-NOTIFICACION-ELECTRONICA.tar.BIN.tar-(1).001

  • Size

    2.0MB

  • Sample

    241123-avgj4ayrcl

  • MD5

    5dec515a0c1014c3f86280a9c0ddf128

  • SHA1

    d8e50518640c32cc9d2b3bca87cf795e69c52aaa

  • SHA256

    f6e291648b460c3d61632cf6e0a3c137b8e3d6e40157dabe54b6cf35f156125f

  • SHA512

    8be507d5f34cd5649303c3d516643ec2ce4417277cd356e2293c3f295617714d35ea162e25338d0e9f2cec8b20cf1cfda00c50417aa0b9d07b0493e6f12f6fbb

  • SSDEEP

    49152:vBNcVN+eSwmIHupv9EomgDLgTHHEnGhawXM2PA:vBUNupv9Egc7WQTzPA

Score
10/10
asyncratdefaultdiscoveryrat

Malware Config

Extracted

Family

asyncrat

Version

| CRACKED BY https://t.me/xworm_v2

Botnet

Default

C2

ansy21nov.duckdns.org:1415

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      00125-ENVIO COPIA DE LA NOTIFICACION ELECTRONICA/010 ENVIO NOTIFICACION.exe

    • Size

      966KB

    • MD5

      e634616d3b445fc1cd55ee79cf5326ea

    • SHA1

      ca27a368d87bc776884322ca996f3b24e20645f4

    • SHA256

      1fcd04fe1a3d519c7d585216b414cd947d16997d77d81a2892821f588c630937

    • SHA512

      7d491c0a97ce60e22238a1a3530f45fbb3c82377b400d7986db09eccad05c9c22fb5daa2b4781882f870ab088326e5f6156613124caa67b54601cbad8f66aa90

    • SSDEEP

      24576:we3xAibB85Z1HrWtB8z1L1OTJu5zzz3zzzozzz3zzzSZ:HxAibBEZ1LWtBzQrZ

    Score
    10/10
    asyncratdefaultdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      00125-ENVIO COPIA DE LA NOTIFICACION ELECTRONICA/libvlc.dll

    • Size

      186KB

    • MD5

      4b262612db64f26ea1168ca569811110

    • SHA1

      8e59964d1302a3109513cd4fd22c1f313e79654c

    • SHA256

      a9340c99206f3388153d85df4ca94d33b28c60879406cc10ff1fd10eae16523f

    • SHA512

      9902e64eb1e5ed4c67f4b7e523b41bde4535148c6be20db5f386a1da74533ca575383f1b3154f5985e379df9e1e164b6bda25a66504edcfaa57d40b04fc658c7

    • SSDEEP

      3072:f3jr3xal+e5Wz5+xCwcNohCMYMUyNUjqsbJLyLM5xjxN:f3jFe5WYYwRj4yNMqSLyLS

    Score
    1/10
    behavioral3behavioral4

    • Target

      00125-ENVIO COPIA DE LA NOTIFICACION ELECTRONICA/libvlccore.dll

    • Size

      2.7MB

    • MD5

      97a73457e3ee2b11618c3e57e3989ffa

    • SHA1

      d38cbe532661b6ff271d231594cad4b8fb37f158

    • SHA256

      d03d0853e0104b47b595d64f79e7ee3d3821fe4cd962f6bd80e9df1507f8f2f4

    • SHA512

      ab786207ef73fd637d9318fcf7a1969158e335d344dcf620888fa8f645715f0bfc098fda12e84fa67406dd80e2b63a1928bee2f13e8e7a9a8c327fa1c94dfe2d

    • SSDEEP

      49152:PA9qEelmNGJRcsADSzpXtBOyABAUZLY6sEZGaXBuQQ9eyn:6q8fmABAUZL3a

    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks