General

  • Target

    21b61d55d4619a2ca0a1893a1a18154260eb81c76d421e3a60e5596ef8c2ccca

  • Size

    61KB

  • Sample

    241225-zgjjzaxlan

  • MD5

    2499d05e60a2aae9123f0f37d12ab1dd

  • SHA1

    b24fe29c7cc5319fe508ea539567e4832c6890cf

  • SHA256

    21b61d55d4619a2ca0a1893a1a18154260eb81c76d421e3a60e5596ef8c2ccca

  • SHA512

    f5fbb29e6e99fd73250737dacc9b45409da600459d6a7c7ef6a02c508f31702e522f9eb5ca9d29ac7d1b59a024dbf66e4a869ea18e75e14c96523011fc1d0ca1

  • SSDEEP

    1536:8F8JsI94/CcIAVBala3b7PSSD3pKFNEx+:m8JsZCcIAzala3b7NDQFNEE

Score
10/10

Malware Config

Targets

    • Target

      21b61d55d4619a2ca0a1893a1a18154260eb81c76d421e3a60e5596ef8c2ccca

    • Size

      61KB

    • MD5

      2499d05e60a2aae9123f0f37d12ab1dd

    • SHA1

      b24fe29c7cc5319fe508ea539567e4832c6890cf

    • SHA256

      21b61d55d4619a2ca0a1893a1a18154260eb81c76d421e3a60e5596ef8c2ccca

    • SHA512

      f5fbb29e6e99fd73250737dacc9b45409da600459d6a7c7ef6a02c508f31702e522f9eb5ca9d29ac7d1b59a024dbf66e4a869ea18e75e14c96523011fc1d0ca1

    • SSDEEP

      1536:8F8JsI94/CcIAVBala3b7PSSD3pKFNEx+:m8JsZCcIAzala3b7NDQFNEE

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Async RAT payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks