General

  • Target

    92def188af1d90f7d89a42f2966753f8cda9332a9950a7aa49c21ac93881ca89

  • Size

    334KB

  • Sample

    241124-ene5xatjdx

  • MD5

    7ee98c22976fb09ceb6c8639b57ec46c

  • SHA1

    493d6e97c7df660901cabe8dc8f0236c7d47bfd8

  • SHA256

    92def188af1d90f7d89a42f2966753f8cda9332a9950a7aa49c21ac93881ca89

  • SHA512

    2aa04be87c2a2d847dcb599cb4a7f0102379769d0e7c325d7ae637f83dbdafe47476dacfe0525bac4b4f04f7149ceb4ad493b4d33db1984448692da6d2f33177

  • SSDEEP

    6144:Li5wh/LyZddE0VxLVLS0hfbKRvUNDhJTIsYI5sgFfv3FJT+ZjlCHbE/PsJU:e5wLOLwgWRMfJTZFv3ojly12

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

Default

C2

host.rorasama.top:63321

127.0.0.1:63321

Mutex

DcRatMutex_qwqdanchun

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      92def188af1d90f7d89a42f2966753f8cda9332a9950a7aa49c21ac93881ca89

    • Size

      334KB

    • MD5

      7ee98c22976fb09ceb6c8639b57ec46c

    • SHA1

      493d6e97c7df660901cabe8dc8f0236c7d47bfd8

    • SHA256

      92def188af1d90f7d89a42f2966753f8cda9332a9950a7aa49c21ac93881ca89

    • SHA512

      2aa04be87c2a2d847dcb599cb4a7f0102379769d0e7c325d7ae637f83dbdafe47476dacfe0525bac4b4f04f7149ceb4ad493b4d33db1984448692da6d2f33177

    • SSDEEP

      6144:Li5wh/LyZddE0VxLVLS0hfbKRvUNDhJTIsYI5sgFfv3FJT+ZjlCHbE/PsJU:e5wLOLwgWRMfJTZFv3ojly12

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Async RAT payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks