Overview

overview

10

Static

static

3

002 COPIA ...ON.exe

windows7-x64

10

002 COPIA ...ON.exe

windows10-2004-x64

10

libvlc.dll

windows7-x64

1

libvlc.dll

windows10-2004-x64

1

libvlccore.dll

windows7-x64

1

libvlccore.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6307a42161862bb3006f263a2883812dffc1ec650ab9a8b757342e8334efd990.zip

  • Size

    2.4MB

  • Sample

    241213-c4117swlbz

  • MD5

    ca8194d5c6b4b94c9b15862081c2d79a

  • SHA1

    8b843f25fa14f33fd8ed381af724cac7f0f3a38b

  • SHA256

    6307a42161862bb3006f263a2883812dffc1ec650ab9a8b757342e8334efd990

  • SHA512

    13fc04fdab29157bf64f95d859948da25d30e3c390c86aab6e7a6bfe14507169c783d8e65e2d4e4340358f9557530f1f549b76ef94012b67a8719cbaa92066a7

  • SSDEEP

    49152:ytDcaN0YmghCEb7IuIQXlHCUJR4X/R7DIPONjviPFJFWt8OXEJPnPn4s3zzlG+:QhuKIfQxCUJ6vRwPkj6dJFKXEhnAsw+

Score
10/10
asyncratdefaultdiscoveryrat

Malware Config

Extracted

Family

asyncrat

Version

| CRACKED BY https://t.me/xworm_v2

Botnet

Default

C2

envnuev1124.duckdns.org:3013

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      002 COPIA DE LA NOTIFICACION.exe

    • Size

      966KB

    • MD5

      e634616d3b445fc1cd55ee79cf5326ea

    • SHA1

      ca27a368d87bc776884322ca996f3b24e20645f4

    • SHA256

      1fcd04fe1a3d519c7d585216b414cd947d16997d77d81a2892821f588c630937

    • SHA512

      7d491c0a97ce60e22238a1a3530f45fbb3c82377b400d7986db09eccad05c9c22fb5daa2b4781882f870ab088326e5f6156613124caa67b54601cbad8f66aa90

    • SSDEEP

      24576:we3xAibB85Z1HrWtB8z1L1OTJu5zzz3zzzozzz3zzzSZ:HxAibBEZ1LWtBzQrZ

    Score
    10/10
    asyncratdefaultdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      libvlc.dll

    • Size

      186KB

    • MD5

      4b262612db64f26ea1168ca569811110

    • SHA1

      8e59964d1302a3109513cd4fd22c1f313e79654c

    • SHA256

      a9340c99206f3388153d85df4ca94d33b28c60879406cc10ff1fd10eae16523f

    • SHA512

      9902e64eb1e5ed4c67f4b7e523b41bde4535148c6be20db5f386a1da74533ca575383f1b3154f5985e379df9e1e164b6bda25a66504edcfaa57d40b04fc658c7

    • SSDEEP

      3072:f3jr3xal+e5Wz5+xCwcNohCMYMUyNUjqsbJLyLM5xjxN:f3jFe5WYYwRj4yNMqSLyLS

    Score
    1/10
    behavioral3behavioral4

    • Target

      libvlccore.dll

    • Size

      2.7MB

    • MD5

      97a73457e3ee2b11618c3e57e3989ffa

    • SHA1

      d38cbe532661b6ff271d231594cad4b8fb37f158

    • SHA256

      d03d0853e0104b47b595d64f79e7ee3d3821fe4cd962f6bd80e9df1507f8f2f4

    • SHA512

      ab786207ef73fd637d9318fcf7a1969158e335d344dcf620888fa8f645715f0bfc098fda12e84fa67406dd80e2b63a1928bee2f13e8e7a9a8c327fa1c94dfe2d

    • SSDEEP

      49152:PA9qEelmNGJRcsADSzpXtBOyABAUZLY6sEZGaXBuQQ9eyn:6q8fmABAUZL3a

    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks