Overview

overview

10

Static

static

10

ElitecutSetup.exe

windows10-ltsc 2021-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ElitecutSetup.exe

  • Size

    263KB

  • Sample

    241124-z1r1fszldx

  • MD5

    eb428cb1edc69d546df64d5af2464ac7

  • SHA1

    1808c6c80e84a4836aee5804093212e8290b1f27

  • SHA256

    c0c05e2fbd218a39ab589c71f5d00a7e32efbd0791c8f3ab347b6034d6a264b2

  • SHA512

    aaf95d3a59f3e166c4e4080939a70346ab1cb29008ee882d01785dbcad9f20db32a7186cfcb61b2a786eac007f213cb3b019e65fb24492db39897ac26f2e0f4e

  • SSDEEP

    3072:X0VlpYUbFPx2VYCm1xC8d0V1EGxMbwqjdzu5fuz:ALb5x51ElvjM9V

Score
10/10
asyncratsigma ratrat

Malware Config

Extracted

Family

asyncrat

Botnet

Sigma Rat

C2

194.59.30.229:3232

Attributes
  • delay

    1

  • install

    true

  • install_file

    syskprvalorlel.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      ElitecutSetup.exe

    • Size

      263KB

    • MD5

      eb428cb1edc69d546df64d5af2464ac7

    • SHA1

      1808c6c80e84a4836aee5804093212e8290b1f27

    • SHA256

      c0c05e2fbd218a39ab589c71f5d00a7e32efbd0791c8f3ab347b6034d6a264b2

    • SHA512

      aaf95d3a59f3e166c4e4080939a70346ab1cb29008ee882d01785dbcad9f20db32a7186cfcb61b2a786eac007f213cb3b019e65fb24492db39897ac26f2e0f4e

    • SSDEEP

      3072:X0VlpYUbFPx2VYCm1xC8d0V1EGxMbwqjdzu5fuz:ALb5x51ElvjM9V

    Score
    10/10
    asyncratsigma ratrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • Async RAT payload

      rat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks