General

  • Target

    JaffaCakes118_4a3f028b9aada68371925347aebedaea4bcecc4029e3cf52ae2d56aa850ed986

  • Size

    753.2MB

  • Sample

    241225-g8k8rsznbs

  • MD5

    451260c9c5104514f3d85d74d1905f23

  • SHA1

    0cc027ebd54f39dc892e2debf74486e645fb639b

  • SHA256

    4a3f028b9aada68371925347aebedaea4bcecc4029e3cf52ae2d56aa850ed986

  • SHA512

    172af2ab6bb1d7b63447f56398d1542208e9e1780f8793fc0fa7d20e36957616e4ffd4a154ff7eff7ec86821bb8a092fb7fde37396ac099544ce49a23ff0b1cd

  • SSDEEP

    12288:d4mT/RcXtvyJdBQhXVQpYDv4alOZqby13caYgd2Ds2UZk:d4C/6XtvWBmQpYTFgcaYgd

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

45.81.243.217:6606

45.81.243.217:7707

45.81.243.217:8808

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      JaffaCakes118_4a3f028b9aada68371925347aebedaea4bcecc4029e3cf52ae2d56aa850ed986

    • Size

      753.2MB

    • MD5

      451260c9c5104514f3d85d74d1905f23

    • SHA1

      0cc027ebd54f39dc892e2debf74486e645fb639b

    • SHA256

      4a3f028b9aada68371925347aebedaea4bcecc4029e3cf52ae2d56aa850ed986

    • SHA512

      172af2ab6bb1d7b63447f56398d1542208e9e1780f8793fc0fa7d20e36957616e4ffd4a154ff7eff7ec86821bb8a092fb7fde37396ac099544ce49a23ff0b1cd

    • SSDEEP

      12288:d4mT/RcXtvyJdBQhXVQpYDv4alOZqby13caYgd2Ds2UZk:d4C/6XtvWBmQpYTFgcaYgd

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Async RAT payload

MITRE ATT&CK Matrix

Tasks