General

  • Target

    734CEFFDDCF39DF0E5C2259E6EBB975B.exe

  • Size

    954KB

  • Sample

    241206-vk87ksxqay

  • MD5

    734ceffddcf39df0e5c2259e6ebb975b

  • SHA1

    f8a544bbe088f09308a01dc598ddaac7cd89a552

  • SHA256

    18725cce353d29c5fb73d6b93b17e0ddef59e53bc19c637cc15a96b921fcc173

  • SHA512

    4206ed733ddd620a5562c6faf0034416bb27f42cfbf84d7af59683a6742b194b066346c021546346993f4deda011db1ce4ba0e7aa8dc8cca9611e00abc8f88f2

  • SSDEEP

    24576:ju6J33O0c+JY5UZ+XC0kGso6Fak3X20cyWY:tu0c++OCvkGs9FaknLYY

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

69.174.100.131:6606

Mutex

abkZfsCYRZhk

Attributes
  • delay

    10

  • install

    false

  • install_file

    order.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      734CEFFDDCF39DF0E5C2259E6EBB975B.exe

    • Size

      954KB

    • MD5

      734ceffddcf39df0e5c2259e6ebb975b

    • SHA1

      f8a544bbe088f09308a01dc598ddaac7cd89a552

    • SHA256

      18725cce353d29c5fb73d6b93b17e0ddef59e53bc19c637cc15a96b921fcc173

    • SHA512

      4206ed733ddd620a5562c6faf0034416bb27f42cfbf84d7af59683a6742b194b066346c021546346993f4deda011db1ce4ba0e7aa8dc8cca9611e00abc8f88f2

    • SSDEEP

      24576:ju6J33O0c+JY5UZ+XC0kGso6Fak3X20cyWY:tu0c++OCvkGs9FaknLYY

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks