General

  • Target

    b4031a0fee34072aa5c58b677ac2be9caf81f6a1e4cee4781cf3345e55df1231.exe

  • Size

    47KB

  • Sample

    241219-ee5dfaxnbm

  • MD5

    f7c0f93efa22340a973ec0e622eae21f

  • SHA1

    b4f1f7d33e3040f74152a48ff19ef4f4ff20137b

  • SHA256

    b4031a0fee34072aa5c58b677ac2be9caf81f6a1e4cee4781cf3345e55df1231

  • SHA512

    e92c879e575015a6c0a9add0d695b3994b45bef0e1c8e259780898464567b45c44f5d6b9952018f26e74b585e16a7258983ecda67b6f68375d0f3fb2307ddb6d

  • SSDEEP

    768:xGq+s3pUtDILNCCa+Di+0jd3gLqRp8A0PiBtYbigeiQ6nzZc04/P6vEgK/JLZVcD:8q+AGtQO+GaPAP2bFpQ6nf+6nkJLZVcD

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

Server

C2

dcuxpag.duckdns.org:5999

Mutex

DcRatMutex_qwqdanchun

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      b4031a0fee34072aa5c58b677ac2be9caf81f6a1e4cee4781cf3345e55df1231.exe

    • Size

      47KB

    • MD5

      f7c0f93efa22340a973ec0e622eae21f

    • SHA1

      b4f1f7d33e3040f74152a48ff19ef4f4ff20137b

    • SHA256

      b4031a0fee34072aa5c58b677ac2be9caf81f6a1e4cee4781cf3345e55df1231

    • SHA512

      e92c879e575015a6c0a9add0d695b3994b45bef0e1c8e259780898464567b45c44f5d6b9952018f26e74b585e16a7258983ecda67b6f68375d0f3fb2307ddb6d

    • SSDEEP

      768:xGq+s3pUtDILNCCa+Di+0jd3gLqRp8A0PiBtYbigeiQ6nzZc04/P6vEgK/JLZVcD:8q+AGtQO+GaPAP2bFpQ6nf+6nkJLZVcD

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

MITRE ATT&CK Matrix

Tasks