General

  • Target

    bd3db35de8078184822ca8742025e6742deed410880360fd1361ec0ddc339067.exe

  • Size

    2.8MB

  • Sample

    241221-dh42ea1lfw

  • MD5

    44f43f42c9ea788b936ec3b5da2e3ad6

  • SHA1

    5ae43b8c14aa9f1b9c1e123e3343de37bff60523

  • SHA256

    bd3db35de8078184822ca8742025e6742deed410880360fd1361ec0ddc339067

  • SHA512

    8f0efd96a0ecda7ddd683520d4005b7ddea427b1dc104fec044812b1289f398b86d889dd901341ee97fcc605b14174fe29793f713e9ee2ab839eca15cff88bda

  • SSDEEP

    24576:gKncCmoImiJ7un1SdudwaXwQ9gGo7GiaeY8i1ZXD1Fcb6DXqM6DV+QVJHcuQ5p3j:nnfZ2aXl2GoaPeY8Mjv69hF65VB

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

104.236.39.42:6606

104.236.39.42:7707

104.236.39.42:8808

Mutex

NLzwJdZ9VJQw

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      bd3db35de8078184822ca8742025e6742deed410880360fd1361ec0ddc339067.exe

    • Size

      2.8MB

    • MD5

      44f43f42c9ea788b936ec3b5da2e3ad6

    • SHA1

      5ae43b8c14aa9f1b9c1e123e3343de37bff60523

    • SHA256

      bd3db35de8078184822ca8742025e6742deed410880360fd1361ec0ddc339067

    • SHA512

      8f0efd96a0ecda7ddd683520d4005b7ddea427b1dc104fec044812b1289f398b86d889dd901341ee97fcc605b14174fe29793f713e9ee2ab839eca15cff88bda

    • SSDEEP

      24576:gKncCmoImiJ7un1SdudwaXwQ9gGo7GiaeY8i1ZXD1Fcb6DXqM6DV+QVJHcuQ5p3j:nnfZ2aXl2GoaPeY8Mjv69hF65VB

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Async RAT payload

MITRE ATT&CK Enterprise v15

Tasks