General

  • Target

    JaffaCakes118_3befbdfc265cdbc3ccc5118d0f99f1a1e6d4d3b267f36e0a53df79c503bfece7

  • Size

    45KB

  • Sample

    241229-bbcmgaxnap

  • MD5

    de561ddc8f596d0dccd0ac7302b1b181

  • SHA1

    49c27bcd06eeb37d717c48a98b5418e682d6fda2

  • SHA256

    3befbdfc265cdbc3ccc5118d0f99f1a1e6d4d3b267f36e0a53df79c503bfece7

  • SHA512

    d5a8ceea456da51453d3a0b7c410b2af418c4a9d92996ca949dca7b1d3908ced5e82a00ee9bf32e0b1e7706e0171829e8b5b51141a1103857f79004e1aa8b4cf

  • SSDEEP

    768:Hu/6ZTgoiziWUUM9rmo2qrrKjGKG6PIyzjbFgX3ieiDs4VonJjBDZjx:Hu/6ZTgle2mKYDy3bCXSL9Eldjx

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

machine3.duckdns.org:2200

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      JaffaCakes118_3befbdfc265cdbc3ccc5118d0f99f1a1e6d4d3b267f36e0a53df79c503bfece7

    • Size

      45KB

    • MD5

      de561ddc8f596d0dccd0ac7302b1b181

    • SHA1

      49c27bcd06eeb37d717c48a98b5418e682d6fda2

    • SHA256

      3befbdfc265cdbc3ccc5118d0f99f1a1e6d4d3b267f36e0a53df79c503bfece7

    • SHA512

      d5a8ceea456da51453d3a0b7c410b2af418c4a9d92996ca949dca7b1d3908ced5e82a00ee9bf32e0b1e7706e0171829e8b5b51141a1103857f79004e1aa8b4cf

    • SSDEEP

      768:Hu/6ZTgoiziWUUM9rmo2qrrKjGKG6PIyzjbFgX3ieiDs4VonJjBDZjx:Hu/6ZTgle2mKYDy3bCXSL9Eldjx

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

MITRE ATT&CK Enterprise v15

Tasks