General

  • Target

    34d1cbf3e3ce909f25dddda62fe82dddc8f2dc016fe9273b2e8ac976e5f07a09

  • Size

    45KB

  • Sample

    250107-2ajmhatldk

  • MD5

    b5551a84c97e0153719c4a243a0e855d

  • SHA1

    7aadd024561e24130f5e9e2e32f923d80603b0c4

  • SHA256

    34d1cbf3e3ce909f25dddda62fe82dddc8f2dc016fe9273b2e8ac976e5f07a09

  • SHA512

    108bae8b045929cdf13c5ac041823541d02322538e82052bc04b196b26d92ac2193cadc42a04ebe94ec2bbfe72a6ffb683b17821b59e06a441f99dffb29742d4

  • SSDEEP

    768:4u/dRTUo0HQbWUnmjSmo2qMKLDpPPIyzjbkgX3i88Q5AathnAxBDZXk:4u/dRTUPE26dIy3brXSe5T/APdXk

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

149.0.19.52:1447

Mutex

lNbiSSaAwddb

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      34d1cbf3e3ce909f25dddda62fe82dddc8f2dc016fe9273b2e8ac976e5f07a09

    • Size

      45KB

    • MD5

      b5551a84c97e0153719c4a243a0e855d

    • SHA1

      7aadd024561e24130f5e9e2e32f923d80603b0c4

    • SHA256

      34d1cbf3e3ce909f25dddda62fe82dddc8f2dc016fe9273b2e8ac976e5f07a09

    • SHA512

      108bae8b045929cdf13c5ac041823541d02322538e82052bc04b196b26d92ac2193cadc42a04ebe94ec2bbfe72a6ffb683b17821b59e06a441f99dffb29742d4

    • SSDEEP

      768:4u/dRTUo0HQbWUnmjSmo2qMKLDpPPIyzjbkgX3i88Q5AathnAxBDZXk:4u/dRTUPE26dIy3brXSe5T/APdXk

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

MITRE ATT&CK Enterprise v15

Tasks