General

  • Target

    crackers.rar

  • Size

    25KB

  • Sample

    241213-yljj4axqfz

  • MD5

    aa7aeddc68534067f04cba538ff43423

  • SHA1

    36afe36fc4a16f8fe5a90971a5cd356b54b2e33b

  • SHA256

    6e037135b5dc8ce75267fcc8215a48041ef8ffa1409dad74799d1295b66f7321

  • SHA512

    e781bfd76a0e980c4502c0d8609c5d01494098bd9c80fce99202fdd35947c43885efaa311ab129109283830bf43656d55e60b14488b6a1b769899aba46b5d211

  • SSDEEP

    768:Qndpw8zHhJuqGMIJaPIrVszW18ZYm/UWGcqZSnh:g/w8zHLnDIMIrf8emYrSh

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

127.0.0.1:1194

193.161.193.99:1194

Mutex

PX50IrcSQ5Gg

Attributes
  • delay

    3

  • install

    true

  • install_file

    crackers.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      crackers.exe

    • Size

      47KB

    • MD5

      c293f3aa9309bdbbea7ce7b82c555e8e

    • SHA1

      69d4edbf51feb07fa5a87eae76418b40de34f72c

    • SHA256

      d61d9974e73631319c87de439a9a018488795e1d31f12a29092a1a90113f0fb0

    • SHA512

      d77b24dafe769fd9ba7bf52a6847ccb217c7e4d3af6adf1837cfcfb151c02acc02cc4ae046e4498f39209c083c188b41ae3d57cda427afbd0ece1d446c11396d

    • SSDEEP

      768:Eu4X9TskvpDWUPlNxmo2qbxLwhRLQ2XyytPIzx4jMZ0bpKRP4tgmcZbKBDZ8x:Eu4X9Tswb2BRL9Xy3zmjMebpKN4th9d+

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Async RAT payload

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks