General

  • Target

    c7a46fb4e1691e3b8712cb595bc25672dfb77570166cc2d2cba02cf2f9e7b728.exe

  • Size

    1.3MB

  • Sample

    241205-dtqyxswlgt

  • MD5

    7f951c4f31319daee4a1f1ece60e5e6b

  • SHA1

    044d20440b4931fd9d357ea8a43f8ff047ebab5d

  • SHA256

    c7a46fb4e1691e3b8712cb595bc25672dfb77570166cc2d2cba02cf2f9e7b728

  • SHA512

    a87acb49cd46ae47ee1bfa6a2dc554240cdc3e55ec625f3b37df3569740565573f433dd8bdd63c578ddfe6563ee44b4f0b71c8524ac628313e733c147e86c5e0

  • SSDEEP

    24576:Yj5zD+Z0RKwDkheamIcjLwRqFazNBJvGKb6NUzP3olmc/nthbgRKlO:Yj5PrRZRsRqMPJvGKb6NUzvsfbjA

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

segundo

C2

formationslistcomplet2.sexidude.com:3056

Mutex

ibsdlcboijedubuheubueyd

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      c7a46fb4e1691e3b8712cb595bc25672dfb77570166cc2d2cba02cf2f9e7b728.exe

    • Size

      1.3MB

    • MD5

      7f951c4f31319daee4a1f1ece60e5e6b

    • SHA1

      044d20440b4931fd9d357ea8a43f8ff047ebab5d

    • SHA256

      c7a46fb4e1691e3b8712cb595bc25672dfb77570166cc2d2cba02cf2f9e7b728

    • SHA512

      a87acb49cd46ae47ee1bfa6a2dc554240cdc3e55ec625f3b37df3569740565573f433dd8bdd63c578ddfe6563ee44b4f0b71c8524ac628313e733c147e86c5e0

    • SSDEEP

      24576:Yj5zD+Z0RKwDkheamIcjLwRqFazNBJvGKb6NUzP3olmc/nthbgRKlO:Yj5PrRZRsRqMPJvGKb6NUzvsfbjA

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks