General

  • Target

    551f620c3b9557dc06aa26121afa7b2f69b9d27be0810ff90f3dc1ed9958640b

  • Size

    817KB

  • Sample

    241124-eqebdstkcw

  • MD5

    5effd4e5b74468ac3298c8255bcacf3b

  • SHA1

    e1f4a94d1ab7151d3dce5167899fd4e90e636911

  • SHA256

    551f620c3b9557dc06aa26121afa7b2f69b9d27be0810ff90f3dc1ed9958640b

  • SHA512

    1eadee22c0975faa616337b29260fc686c72c9bb3dbb322cbde987da273d759f67b85306533c0601fcb4d1de4c4cb7761195946ed24410c348dafdffd4bb5763

  • SSDEEP

    24576:4lH3UV7uG8N6A2500v90pkoMD9t2YCJUNtnZ73Y3qn:4fyb

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

Default

C2

host.rorasama.top:63321

127.0.0.1:63321

Mutex

DcRatMutex_qwqdanchun

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      551f620c3b9557dc06aa26121afa7b2f69b9d27be0810ff90f3dc1ed9958640b

    • Size

      817KB

    • MD5

      5effd4e5b74468ac3298c8255bcacf3b

    • SHA1

      e1f4a94d1ab7151d3dce5167899fd4e90e636911

    • SHA256

      551f620c3b9557dc06aa26121afa7b2f69b9d27be0810ff90f3dc1ed9958640b

    • SHA512

      1eadee22c0975faa616337b29260fc686c72c9bb3dbb322cbde987da273d759f67b85306533c0601fcb4d1de4c4cb7761195946ed24410c348dafdffd4bb5763

    • SSDEEP

      24576:4lH3UV7uG8N6A2500v90pkoMD9t2YCJUNtnZ73Y3qn:4fyb

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Async RAT payload

MITRE ATT&CK Matrix

Tasks