General

  • Target

    173349048648c854fdb460c6c7c5fd91e325ea882961d8aa5918c705b053bb8e9350ae27c8877.dat-decoded.exe

  • Size

    63KB

  • Sample

    241206-qdrxhaynay

  • MD5

    b2ec5b95b35cf81e713528cfcd795f75

  • SHA1

    1bf79e092f88d3638ff927bd6650435cf140cd32

  • SHA256

    50bde48b7037890d318cf123e23a78f734634cff29354fc5852293d5702737b9

  • SHA512

    106cd9ba2e3f4b57cb8c9a8cedd886c788863c6adfff00953f7c436a8edef3c9d6616552ad7bb714f1a4664d46246feaa66e01f69ad7d627b7947fdad2bb88a8

  • SSDEEP

    1536:p2wm8PN1ak1gcKu5UYFaSSIsE5bBAPg/RrQTGlx:p218PN1ak1Ku5UYFaSShE5bB/Gmx

Malware Config

Extracted

Family

asyncrat

Version

| CRACKED BY https://t.me/xworm_v2

Botnet

zzDefaultPET

C2

deadpoolstart2029.duckdns.org:6090

Mutex

WinCookies

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      173349048648c854fdb460c6c7c5fd91e325ea882961d8aa5918c705b053bb8e9350ae27c8877.dat-decoded.exe

    • Size

      63KB

    • MD5

      b2ec5b95b35cf81e713528cfcd795f75

    • SHA1

      1bf79e092f88d3638ff927bd6650435cf140cd32

    • SHA256

      50bde48b7037890d318cf123e23a78f734634cff29354fc5852293d5702737b9

    • SHA512

      106cd9ba2e3f4b57cb8c9a8cedd886c788863c6adfff00953f7c436a8edef3c9d6616552ad7bb714f1a4664d46246feaa66e01f69ad7d627b7947fdad2bb88a8

    • SSDEEP

      1536:p2wm8PN1ak1gcKu5UYFaSSIsE5bBAPg/RrQTGlx:p218PN1ak1Ku5UYFaSShE5bB/Gmx

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

MITRE ATT&CK Enterprise v15

Tasks