Overview

overview

10

Static

static

3

flash/flash.exe

windows7-x64

10

flash/flash.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_136ed00b06adbf6e557472a882a0f10bbd07d9d5ed19ff285d0a475f0786084a

  • Size

    380KB

  • Sample

    241223-t8t7wsvpcn

  • MD5

    5db179461d95dd2cf1ec2bc4b6f9488a

  • SHA1

    13d95113aa7b82534e862648b87f53216d65728e

  • SHA256

    136ed00b06adbf6e557472a882a0f10bbd07d9d5ed19ff285d0a475f0786084a

  • SHA512

    b072a7a68c25108fd4c87b87b153d5961501b43ddd28aac486fbf1e0b785f29296ee071a0967efac5eadaab4d283123c5844f95cf7217ea6c7c804a95c4030b5

  • SSDEEP

    6144:8m9Y0HIxTj3YY7u6cm8+B7szh+iYwbsRw0B5DRPT1B7zjnE4NlyocbqWvQx/LagX:xNH8vYY7++B7s+9XwyD1p9nRNlsZvQxz

Score
10/10
asyncratdefaultdiscoveryrat

Malware Config

Extracted

Family

asyncrat

Version

Link-Quit

Botnet

Default

C2

info.ctxcel.com:443

Mutex

DcRatMutex_qwqdanchun

Attributes
  • delay

    1

  • install

    true

  • install_file

    server.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      flash/flash.exe

    • Size

      450KB

    • MD5

      669a5b5d993f472a4ab68e4405649fde

    • SHA1

      56332c906d54312d99e71c649cbd7fe1e0639c83

    • SHA256

      29372ef20086423e80fecb84a9ad7980f781433772c6d05f3134037ab819badc

    • SHA512

      46012e73b835372c0c9f424c8afeb8cf2b29a8c03023d6265534da55f310c2cdd682590deafe065430980d9608733db5da65f59d7dc650f7347408b31a8e7ae8

    • SSDEEP

      12288:Ih1Lk70TnvjcbqPOdpMFgclmThae2zsWFBjlSc+n:Uk70Trce2d4JKUsWLlP6

    Score
    10/10
    asyncratdefaultdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • Async RAT payload

      rat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks