General

  • Target

    JaffaCakes118_cbbced5ccc483f9acfd0f96acf8944798dec06b6541ede54d01877df6e47c44d

  • Size

    1.1MB

  • Sample

    241222-bytt9sxqaz

  • MD5

    dafad1d426889ba283eac46ba73cced2

  • SHA1

    16f2652749c23f426ac0bc85907ec3816c56cf56

  • SHA256

    cbbced5ccc483f9acfd0f96acf8944798dec06b6541ede54d01877df6e47c44d

  • SHA512

    363a0c8d1afb8591cd3f2b6ce0409afd5fa588150f1f0d2532886e19df4d83e47de76724e04b312378fdb64805240a998f61f706e5a89939df84573d1b582399

  • SSDEEP

    24576:pr1LQJJtK3D0E5Xyi/NMdCRnqcyl6ieU9AiteAb3VNqSAeCfGJs9271UyQ2/q:NlQxgyi/CoRn5+gU9Au7rAeCfGJs9270

Malware Config

Extracted

Family

asyncrat

Version

ANC8.0

Botnet

DATA2

C2

154.211.6.212:8848

Mutex

DefaultT

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      JaffaCakes118_cbbced5ccc483f9acfd0f96acf8944798dec06b6541ede54d01877df6e47c44d

    • Size

      1.1MB

    • MD5

      dafad1d426889ba283eac46ba73cced2

    • SHA1

      16f2652749c23f426ac0bc85907ec3816c56cf56

    • SHA256

      cbbced5ccc483f9acfd0f96acf8944798dec06b6541ede54d01877df6e47c44d

    • SHA512

      363a0c8d1afb8591cd3f2b6ce0409afd5fa588150f1f0d2532886e19df4d83e47de76724e04b312378fdb64805240a998f61f706e5a89939df84573d1b582399

    • SSDEEP

      24576:pr1LQJJtK3D0E5Xyi/NMdCRnqcyl6ieU9AiteAb3VNqSAeCfGJs9271UyQ2/q:NlQxgyi/CoRn5+gU9Au7rAeCfGJs9270

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Async RAT payload

MITRE ATT&CK Enterprise v15

Tasks