Resubmissions

13-01-2025 00:39

250113-az539azlgk 10

12-01-2025 23:59

250112-31r71aykbm 10

12-01-2025 17:46

250112-wcgm2askdt 10

General

  • Target

    Satano_crack V2.exe

  • Size

    63KB

  • Sample

    250112-31r71aykbm

  • MD5

    2558bde93ed4d7a3c12a65c8a20a1b4f

  • SHA1

    76d467f4ca5c458490a8f0354085054af11266be

  • SHA256

    7f7d6a39badf58d5bf1ce28c19c9eac3a334186df500298c34760ced2dfe9202

  • SHA512

    107afbd3fb10279d20847a745723eb6f7d63f677fcff1e826f1ecdb35a6851e83d83034057a1bd102196d451f636192b04daf74db5d7aa2755e32b3c92a9c087

  • SSDEEP

    768:3IPbDvPRM78HkC8A+XIVq52hFvjQDID/Ta1+T4TtBGHmDbDQph0oXLyQxSu80Iph:ifRcN4fQ+/TavYUb2h9+QIuRIpqKmY7

Malware Config

Extracted

Family

asyncrat

Botnet

Cheat

C2

127.0.0.1:3232

Mutex

Satano crack

Attributes
  • delay

    1

  • install

    true

  • install_file

    Satano crack.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Satano_crack V2.exe

    • Size

      63KB

    • MD5

      2558bde93ed4d7a3c12a65c8a20a1b4f

    • SHA1

      76d467f4ca5c458490a8f0354085054af11266be

    • SHA256

      7f7d6a39badf58d5bf1ce28c19c9eac3a334186df500298c34760ced2dfe9202

    • SHA512

      107afbd3fb10279d20847a745723eb6f7d63f677fcff1e826f1ecdb35a6851e83d83034057a1bd102196d451f636192b04daf74db5d7aa2755e32b3c92a9c087

    • SSDEEP

      768:3IPbDvPRM78HkC8A+XIVq52hFvjQDID/Ta1+T4TtBGHmDbDQph0oXLyQxSu80Iph:ifRcN4fQ+/TavYUb2h9+QIuRIpqKmY7

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Async RAT payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks