General

  • Target

    a3b822deae3813848f93cff1574bd5d4.exe

  • Size

    66KB

  • Sample

    250109-agllwsyrhx

  • MD5

    a3b822deae3813848f93cff1574bd5d4

  • SHA1

    9693180d30287003fc390088830421a919f8dc96

  • SHA256

    61ea1e0cc88a7c1f5e26752f6ade2701ec8487a816a2cf2788482f480c7b8831

  • SHA512

    1ce7d2b71f6f3b24088750e0e1607cb9006bdeb207315e8fa28fbc6686672d02cc80a96d881c7533989e78beb8d180682e95ac1867d1d87d021cba790414295c

  • SSDEEP

    1536:t2w3dvk1EkwgcKu5UYFI9lVqb46tj6OsbDd8rfTGSx:t2Udvk1EkIKu5UYFIbVqb46tqunhx

Malware Config

Extracted

Family

asyncrat

Version

| clay_root

Botnet

AAAAAAAAAAAAAAAAAA

C2

85.239.237.148:1998

Mutex

AsyncMutex_63EADSGAS2FWAG2tSAGAWkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      a3b822deae3813848f93cff1574bd5d4.exe

    • Size

      66KB

    • MD5

      a3b822deae3813848f93cff1574bd5d4

    • SHA1

      9693180d30287003fc390088830421a919f8dc96

    • SHA256

      61ea1e0cc88a7c1f5e26752f6ade2701ec8487a816a2cf2788482f480c7b8831

    • SHA512

      1ce7d2b71f6f3b24088750e0e1607cb9006bdeb207315e8fa28fbc6686672d02cc80a96d881c7533989e78beb8d180682e95ac1867d1d87d021cba790414295c

    • SSDEEP

      1536:t2w3dvk1EkwgcKu5UYFI9lVqb46tj6OsbDd8rfTGSx:t2Udvk1EkIKu5UYFIbVqb46tqunhx

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks