General

  • Target

    1200b4fd308637f6aa6e8de5fbb57ff1.exe

  • Size

    66KB

  • Sample

    250101-2cg7fsxqay

  • MD5

    1200b4fd308637f6aa6e8de5fbb57ff1

  • SHA1

    5e467c042ef8080f9608f0bf268ea2bb5dc3248c

  • SHA256

    6238bd8ffaadb351f9a5abd2b86e72ec96ba07c2fabe4484c1a985035353ae60

  • SHA512

    8011014730c7a0e5f5e91ce227bacf95b2a79965b732d97ecf6f4d5708a228f954dce732f3d8f9f4d0cce450d4e0a9702c10ff874d014cdb651e3d251b965ac1

  • SSDEEP

    1536:PmImx6tX2kNff4sKu+UYFVsL7DlbT2KXpfmzG8RLh2LlLrmTGtx:Pm9x6tmkN7Ku+UYFVG7JbTafR0lLEmx

Malware Config

Extracted

Family

asyncrat

Version

| Edit by Vinom Rat

Botnet

Default

C2

hellonew2025.kozow.com:6606

hellonew2025.kozow.com:7707

hellonew2025.kozow.com:8808

hellonew2025.kozow.com:6666

hellonew2025.kozow.com:7777

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      1200b4fd308637f6aa6e8de5fbb57ff1.exe

    • Size

      66KB

    • MD5

      1200b4fd308637f6aa6e8de5fbb57ff1

    • SHA1

      5e467c042ef8080f9608f0bf268ea2bb5dc3248c

    • SHA256

      6238bd8ffaadb351f9a5abd2b86e72ec96ba07c2fabe4484c1a985035353ae60

    • SHA512

      8011014730c7a0e5f5e91ce227bacf95b2a79965b732d97ecf6f4d5708a228f954dce732f3d8f9f4d0cce450d4e0a9702c10ff874d014cdb651e3d251b965ac1

    • SSDEEP

      1536:PmImx6tX2kNff4sKu+UYFVsL7DlbT2KXpfmzG8RLh2LlLrmTGtx:Pm9x6tmkN7Ku+UYFVG7JbTafR0lLEmx

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks