General

  • Target

    4448-2-0x0000000005240000-0x0000000005544000-memory.dmp

  • Size

    3.0MB

  • Sample

    241231-n7xzha1rbl

  • MD5

    71196f07827a112df47dd2921241eee7

  • SHA1

    b475271485bf182ecacdbc20c63ed6b00524a2b9

  • SHA256

    dbd418893b7c30779a5736161f94ce0bdccc81f01c6eee54c419b0547edee971

  • SHA512

    783b634d3efea801e895a12f994140f796cefdbfed5a542fc962459e73451167329e5d9fb98dcbe85f04a31817022f81385c531ef558f3c9f084897431bd9c6d

  • SSDEEP

    49152:XPCQNqtCSmdatQdsgUBX3B3kNC3H6vUZIr/Nxe:XPVlSmdatQSq

Malware Config

Targets

    • Target

      4448-2-0x0000000005240000-0x0000000005544000-memory.dmp

    • Size

      3.0MB

    • MD5

      71196f07827a112df47dd2921241eee7

    • SHA1

      b475271485bf182ecacdbc20c63ed6b00524a2b9

    • SHA256

      dbd418893b7c30779a5736161f94ce0bdccc81f01c6eee54c419b0547edee971

    • SHA512

      783b634d3efea801e895a12f994140f796cefdbfed5a542fc962459e73451167329e5d9fb98dcbe85f04a31817022f81385c531ef558f3c9f084897431bd9c6d

    • SSDEEP

      49152:XPCQNqtCSmdatQdsgUBX3B3kNC3H6vUZIr/Nxe:XPVlSmdatQSq

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • StormKitty

      StormKitty is an open source info stealer written in C#.

    • StormKitty payload

    • Stormkitty family

MITRE ATT&CK Matrix

Tasks