General

  • Target

    0ef1e1811c949b40152570190c4082d0331bea49689cc5c93984c68b4354c4b1.exe

  • Size

    70KB

  • Sample

    241210-clfbsavmfn

  • MD5

    b45d89a3aa9ab7ea79ce34db08f0ecf6

  • SHA1

    1904057deae61dfab5902ec72474b0520e681e35

  • SHA256

    0ef1e1811c949b40152570190c4082d0331bea49689cc5c93984c68b4354c4b1

  • SHA512

    9862dba2b2da8f99ef9483707663161abd52e12556d685a23df76a9ab2e3ec88ddfc25c303411f062afccf20c0d08c61985d88c4b3bd213b312c9720da25358d

  • SSDEEP

    1536:sKT9Ixfy520nd2rbElGlRVjInvOlVnWUx:sKT9IxfyEyd2rbElG9IvO7nZx

Malware Config

Extracted

Family

asyncrat

Version

A 12

Botnet

VPN

C2

136.243.179.5:32

Mutex

AsyncMutex_5552ss

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      0ef1e1811c949b40152570190c4082d0331bea49689cc5c93984c68b4354c4b1.exe

    • Size

      70KB

    • MD5

      b45d89a3aa9ab7ea79ce34db08f0ecf6

    • SHA1

      1904057deae61dfab5902ec72474b0520e681e35

    • SHA256

      0ef1e1811c949b40152570190c4082d0331bea49689cc5c93984c68b4354c4b1

    • SHA512

      9862dba2b2da8f99ef9483707663161abd52e12556d685a23df76a9ab2e3ec88ddfc25c303411f062afccf20c0d08c61985d88c4b3bd213b312c9720da25358d

    • SSDEEP

      1536:sKT9Ixfy520nd2rbElGlRVjInvOlVnWUx:sKT9IxfyEyd2rbElG9IvO7nZx

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

MITRE ATT&CK Enterprise v15

Tasks