General
-
Target
https://dl.dropboxusercontent.com/scl/fi/ujsqzlqmqqfogzkbu765v/2NOTIFICACI-N-EELCTR-NICA-ESM-AGRADECEMOS-SU-CONFIRMACION-DE-RECIBIDO.tar.ACE.tar.001?rlkey=7ong9xxy3wa8vjtkl16dt8fla&st=s7sxwmxn&dl=0
-
Sample
241128-yx967aynhx
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
| CRACKED BY https://t.me/xworm_v2
Botnet
FENIX 26
C2
25novwins.duckdns.org:9003
Mutex
AsyncMutex_6SI8OkPnk
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
aes.plain
Targets
-
-
Target
https://dl.dropboxusercontent.com/scl/fi/ujsqzlqmqqfogzkbu765v/2NOTIFICACI-N-EELCTR-NICA-ESM-AGRADECEMOS-SU-CONFIRMACION-DE-RECIBIDO.tar.ACE.tar.001?rlkey=7ong9xxy3wa8vjtkl16dt8fla&st=s7sxwmxn&dl=0
Score10/10-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Asyncrat family
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-