Overview

overview

10

Static

static

3

6b612069e1...cf.exe

windows7-x64

10

6b612069e1...cf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6b612069e1c5dbe66c874cfcfae64c97a215e1556e464d153e56e956058d5dcf.exe

  • Size

    130KB

  • Sample

    241218-fkfgyatpct

  • MD5

    17d63437dacbd0d9b3953add961c2e60

  • SHA1

    4a9ece9d9fd5ab0b003a45b453aba60e949f3908

  • SHA256

    6b612069e1c5dbe66c874cfcfae64c97a215e1556e464d153e56e956058d5dcf

  • SHA512

    9ab99f059e71987e7cbb2c3e61810c8dba6961cc0b52564e7a1e11818b7c4b33a2b97865d196c2925476b830428dd5a76cfbde39f82a923be229cffaea0a9e70

  • SSDEEP

    3072:RQNUZEL5p/oJ/+08cowfSnZVfWNlI/XennJ2F+8qld17JdGi4yyscfa:2r/oxptoISZlWNlImnJK+OBvq

Score
10/10
asyncratdefaultdiscoveryrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

127.0.0.1:6606

127.0.0.1:7707

127.0.0.1:8808
Mutex

QwBjELGOeYoX

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      6b612069e1c5dbe66c874cfcfae64c97a215e1556e464d153e56e956058d5dcf.exe

    • Size

      130KB

    • MD5

      17d63437dacbd0d9b3953add961c2e60

    • SHA1

      4a9ece9d9fd5ab0b003a45b453aba60e949f3908

    • SHA256

      6b612069e1c5dbe66c874cfcfae64c97a215e1556e464d153e56e956058d5dcf

    • SHA512

      9ab99f059e71987e7cbb2c3e61810c8dba6961cc0b52564e7a1e11818b7c4b33a2b97865d196c2925476b830428dd5a76cfbde39f82a923be229cffaea0a9e70

    • SSDEEP

      3072:RQNUZEL5p/oJ/+08cowfSnZVfWNlI/XennJ2F+8qld17JdGi4yyscfa:2r/oxptoISZlWNlImnJK+OBvq

    Score
    10/10
    asyncratdefaultdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • Async RAT payload

      rat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks