General

  • Target

    89b20fda870386450c8a192193a3bb0828a50862a001144287b5f003c893ba75N.exe

  • Size

    130KB

  • Sample

    241218-j8np1a1lg1

  • MD5

    3a4e90bbe28369ece2cea39def076600

  • SHA1

    7c98e396393a2ae95905b68f741705fef03a618d

  • SHA256

    89b20fda870386450c8a192193a3bb0828a50862a001144287b5f003c893ba75

  • SHA512

    e4236c707b8288a9b94669fe73925a9bf46e84c430b9bb743322861827b7dbc56793f199ecbdb42a1123f939279e140573822a57d722f0172958231ec0f158b3

  • SSDEEP

    3072:RQNUZEL5p/oJ/+08cowfSnZVfWNlI/XennJ2F+8qld17JdGi4yyscf:2r/oxptoISZlWNlImnJK+OBv

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

127.0.0.1:6606

127.0.0.1:7707

127.0.0.1:8808

Mutex

QwBjELGOeYoX

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      89b20fda870386450c8a192193a3bb0828a50862a001144287b5f003c893ba75N.exe

    • Size

      130KB

    • MD5

      3a4e90bbe28369ece2cea39def076600

    • SHA1

      7c98e396393a2ae95905b68f741705fef03a618d

    • SHA256

      89b20fda870386450c8a192193a3bb0828a50862a001144287b5f003c893ba75

    • SHA512

      e4236c707b8288a9b94669fe73925a9bf46e84c430b9bb743322861827b7dbc56793f199ecbdb42a1123f939279e140573822a57d722f0172958231ec0f158b3

    • SSDEEP

      3072:RQNUZEL5p/oJ/+08cowfSnZVfWNlI/XennJ2F+8qld17JdGi4yyscf:2r/oxptoISZlWNlImnJK+OBv

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Async RAT payload

MITRE ATT&CK Enterprise v15

Tasks