Overview

overview

10

Static

static

3

DEMANDA EM...87.exe

windows7-x64

10

DEMANDA EM...87.exe

windows10-2004-x64

10

DEMANDA EM...lc.dll

windows7-x64

1

DEMANDA EM...lc.dll

windows10-2004-x64

1

DEMANDA EM...re.dll

windows7-x64

1

DEMANDA EM...re.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7cbcd62b53718359ad00e60265ecf328.001

  • Size

    2.0MB

  • Sample

    241125-ygx7pasqhs

  • MD5

    7cbcd62b53718359ad00e60265ecf328

  • SHA1

    29de9f20926a531a512fae929519543f30800712

  • SHA256

    d7cc2871b126a7a15ca25d63c65938669a3fa0a59ad0692fc3d643545da99791

  • SHA512

    67d6042af5b9b490a2b87002b6c87f8110d6fc77de5af753d42192a26e928d7bfc791e6a87a6a397f88ccf145cc9855bd3a8049d8e962ce26f634b59608df207

  • SSDEEP

    49152:BAa1nf5zqSiVK/1tPWGCooZZCwdwwJUCKp3LG+ThNeujvCzyc:BP8Sic9J13wdwktKFLG+ThUujKzyc

Score
10/10
asyncratdefaultdiscoveryrat

Malware Config

Extracted

Family

asyncrat

Version

| CRACKED BY https://t.me/xworm_v2

Botnet

Default

C2

nuevo12.duckdns.org:3000

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      DEMANDA EMITIDA EL DIA 22 DEL MES EN CURSO N° 20240710-5427-572468-87/demanda N° 20240710-5427-572468-87.exe

    • Size

      966KB

    • MD5

      e634616d3b445fc1cd55ee79cf5326ea

    • SHA1

      ca27a368d87bc776884322ca996f3b24e20645f4

    • SHA256

      1fcd04fe1a3d519c7d585216b414cd947d16997d77d81a2892821f588c630937

    • SHA512

      7d491c0a97ce60e22238a1a3530f45fbb3c82377b400d7986db09eccad05c9c22fb5daa2b4781882f870ab088326e5f6156613124caa67b54601cbad8f66aa90

    • SSDEEP

      24576:we3xAibB85Z1HrWtB8z1L1OTJu5zzz3zzzozzz3zzzSZ:HxAibBEZ1LWtBzQrZ

    Score
    10/10
    asyncratdefaultdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      DEMANDA EMITIDA EL DIA 22 DEL MES EN CURSO N° 20240710-5427-572468-87/libvlc.dll

    • Size

      186KB

    • MD5

      4b262612db64f26ea1168ca569811110

    • SHA1

      8e59964d1302a3109513cd4fd22c1f313e79654c

    • SHA256

      a9340c99206f3388153d85df4ca94d33b28c60879406cc10ff1fd10eae16523f

    • SHA512

      9902e64eb1e5ed4c67f4b7e523b41bde4535148c6be20db5f386a1da74533ca575383f1b3154f5985e379df9e1e164b6bda25a66504edcfaa57d40b04fc658c7

    • SSDEEP

      3072:f3jr3xal+e5Wz5+xCwcNohCMYMUyNUjqsbJLyLM5xjxN:f3jFe5WYYwRj4yNMqSLyLS

    Score
    1/10
    behavioral3behavioral4

    • Target

      DEMANDA EMITIDA EL DIA 22 DEL MES EN CURSO N° 20240710-5427-572468-87/libvlccore.dll

    • Size

      2.7MB

    • MD5

      97a73457e3ee2b11618c3e57e3989ffa

    • SHA1

      d38cbe532661b6ff271d231594cad4b8fb37f158

    • SHA256

      d03d0853e0104b47b595d64f79e7ee3d3821fe4cd962f6bd80e9df1507f8f2f4

    • SHA512

      ab786207ef73fd637d9318fcf7a1969158e335d344dcf620888fa8f645715f0bfc098fda12e84fa67406dd80e2b63a1928bee2f13e8e7a9a8c327fa1c94dfe2d

    • SSDEEP

      49152:PA9qEelmNGJRcsADSzpXtBOyABAUZLY6sEZGaXBuQQ9eyn:6q8fmABAUZL3a

    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks