Overview

overview

10

Static

static

10

778975d324...c4.exe

windows7-x64

10

778975d324...c4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_5ae62f030ffa1d99c0e3f1797bfefb99594d52e959d7c7ff8686725ce3c434be

  • Size

    23KB

  • Sample

    241228-3v5adavrhz

  • MD5

    b5944df21b8ecf191d8d5e68d7e1deba

  • SHA1

    db1cbf9b836e5aa72840bbf4acf72990145702d4

  • SHA256

    5ae62f030ffa1d99c0e3f1797bfefb99594d52e959d7c7ff8686725ce3c434be

  • SHA512

    562841fd6f61e4da32585a5a10b266272d72df2a94e6a0c5cd92f298c9bab594dd0b24d7ea727ac6ae69c2362f3d2340b87e2aa71a601ef5ffc32b79e26365d0

  • SSDEEP

    384:1aDl7tosDqxBwqxaf+95JubYK45+X6eitPIFuzU5P3HSgE8pMrsRQa0v2+m6k:1mJcBZG1bIPeitOrE6msRQatV

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

Default

C2

sky01.publicvm.com:9217

Mutex

DcRatMutex_qwqdanchun

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      778975d324970c8ac14b1257fa51ac86c24b825e0e0c19133a14b2eda56a43c4

    • Size

      47KB

    • MD5

      c622227b1b8e8b564b113d902593c498

    • SHA1

      7419b0ca2464860cfa472893cfdfa06cceb06275

    • SHA256

      778975d324970c8ac14b1257fa51ac86c24b825e0e0c19133a14b2eda56a43c4

    • SHA512

      a982f0e2f62e11237e495f578692ff7bae4fed2564deecb23018cd41014e740cfa6c74c1136c619bd2d9419e3c9eaaf0915b66b919b4a306798e7ef657a0f89f

    • SSDEEP

      768:oq+s3pUtDILNCCa+Dif21jhCpTYiu+YbfgeSkoi6vEgK/JfZVc6KNS:oq+AGtQOoeWlboT1znkJfZVclNS

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks