Overview

overview

10

Static

static

10

dsa.exe._obf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dsa.exe._obf.exe

  • Size

    51KB

  • Sample

    241127-3c6qgsvpev

  • MD5

    bbd301b6d42c6949ba78ff302cdeed5d

  • SHA1

    735b2051bc7e43f3e5a82ab9c076d2547936b4bf

  • SHA256

    daabb8e4bc8f4fc2d09620a93473c25c1bac1f33478596436398d5ff9126b535

  • SHA512

    030c1927bc0da15fce723c799ddd3ec134f1da551143574bbf70ba2fd467875472cc14be5200b3c86566e8e21b77cedb192cfbb6a00bf1ec27e45e6f79aad7e0

  • SSDEEP

    1536:qVBuT4hsvH6SMBccyb2G6KpH3B7q0nWnvhHUmax:qVBuewaSMicyb2cpHNRnYpHUXx

Score
10/10
asyncratdiscoveryrat

Malware Config

Targets

    • Target

      dsa.exe._obf.exe

    • Size

      51KB

    • MD5

      bbd301b6d42c6949ba78ff302cdeed5d

    • SHA1

      735b2051bc7e43f3e5a82ab9c076d2547936b4bf

    • SHA256

      daabb8e4bc8f4fc2d09620a93473c25c1bac1f33478596436398d5ff9126b535

    • SHA512

      030c1927bc0da15fce723c799ddd3ec134f1da551143574bbf70ba2fd467875472cc14be5200b3c86566e8e21b77cedb192cfbb6a00bf1ec27e45e6f79aad7e0

    • SSDEEP

      1536:qVBuT4hsvH6SMBccyb2G6KpH3B7q0nWnvhHUmax:qVBuewaSMicyb2cpHNRnYpHUXx

    Score
    10/10
    asyncratdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • Async RAT payload

      rat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks