General

  • Target

    852a008d3c6ce0c868ebc9e48cce189afb4abee4609dc1f3c05256adc212d865_Sigmanly

  • Size

    4.5MB

  • Sample

    241224-h535vaspez

  • MD5

    f32e537683d968304ca7c5be6a0a22c8

  • SHA1

    535583ce14bc0ecc2c2f46344ff1c3cc76740211

  • SHA256

    852a008d3c6ce0c868ebc9e48cce189afb4abee4609dc1f3c05256adc212d865

  • SHA512

    2cc24cb737796953f99e407adb7eabd5f915ec40962b6fedd26ba4c7b4ac40c581932c4c7ef0ec8dc69e0967399153fb8514f98d84bb799a7e841515354b7eac

  • SSDEEP

    49152:idMZdRuGZ2OY7SzJLJz6QijzJfLU5CBAWw:idOdRu6tOcJB6RlL2CBA

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

104.236.39.42:6606

104.236.39.42:7707

104.236.39.42:8808

Mutex

NLzwJdZ9VJQw

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      852a008d3c6ce0c868ebc9e48cce189afb4abee4609dc1f3c05256adc212d865_Sigmanly

    • Size

      4.5MB

    • MD5

      f32e537683d968304ca7c5be6a0a22c8

    • SHA1

      535583ce14bc0ecc2c2f46344ff1c3cc76740211

    • SHA256

      852a008d3c6ce0c868ebc9e48cce189afb4abee4609dc1f3c05256adc212d865

    • SHA512

      2cc24cb737796953f99e407adb7eabd5f915ec40962b6fedd26ba4c7b4ac40c581932c4c7ef0ec8dc69e0967399153fb8514f98d84bb799a7e841515354b7eac

    • SSDEEP

      49152:idMZdRuGZ2OY7SzJLJz6QijzJfLU5CBAWw:idOdRu6tOcJB6RlL2CBA

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Async RAT payload

MITRE ATT&CK Enterprise v15

Tasks