General

  • Target

    44f43f42c9ea788b936ec3b5da2e3ad6.bin

  • Size

    733KB

  • Sample

    241222-blsrfaxkhv

  • MD5

    75b6e8a0c38f7cd781bb16498884a509

  • SHA1

    aa2a143efe4a05ca3ddd13d5eb64107f9a1d087e

  • SHA256

    2911df08bef816c4e6610d892f0bd903d38f877d9866b86970dc0befbfdab819

  • SHA512

    97fa3a3a5ceee8cb1275fcb39c339a482f3189029f9e26d108e077b9a3d6b9bc26cd421717822710939f45d87ae48802e54b288ee6e46d7a4f379c813d3b7922

  • SSDEEP

    12288:P7ylp6zSuqBXHeLQYC2joo44MSQfNfF5DfF+5wHgW10zTBYsUh8ZZL:P7yl4gtem2jsrt385Ygh9Y2j

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

104.236.39.42:6606

104.236.39.42:7707

104.236.39.42:8808

Mutex

NLzwJdZ9VJQw

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      bd3db35de8078184822ca8742025e6742deed410880360fd1361ec0ddc339067.exe

    • Size

      2.8MB

    • MD5

      44f43f42c9ea788b936ec3b5da2e3ad6

    • SHA1

      5ae43b8c14aa9f1b9c1e123e3343de37bff60523

    • SHA256

      bd3db35de8078184822ca8742025e6742deed410880360fd1361ec0ddc339067

    • SHA512

      8f0efd96a0ecda7ddd683520d4005b7ddea427b1dc104fec044812b1289f398b86d889dd901341ee97fcc605b14174fe29793f713e9ee2ab839eca15cff88bda

    • SSDEEP

      24576:gKncCmoImiJ7un1SdudwaXwQ9gGo7GiaeY8i1ZXD1Fcb6DXqM6DV+QVJHcuQ5p3j:nnfZ2aXl2GoaPeY8Mjv69hF65VB

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Async RAT payload

MITRE ATT&CK Enterprise v15

Tasks