General

  • Target

    388f5d7ff3ff93d7dff0a22255a2ffa32740f7680b33969facff591128d2d500.exe

  • Size

    47KB

  • Sample

    250116-cszn1awqfz

  • MD5

    aa21749730921b1f60479e48967e2114

  • SHA1

    72598b4dd4f8117413e262c2a68250b1850bbfe1

  • SHA256

    388f5d7ff3ff93d7dff0a22255a2ffa32740f7680b33969facff591128d2d500

  • SHA512

    89bced8d00940856a30a9ecf0706eab99599419ae6c1e6de98ce79d5983ca80478ecc2b285a14a23c757b8850286ea77cd6681d37cf70b833338d0765bca8d77

  • SSDEEP

    768:60ORLQlmfJfgEEdaKnSL79nXIhJwq24HlHvKNu9k0A3whM80rZsd7/lZVc6KNE:HcLQlmfbCeegqxHb9s3Mvqs9/lZVclNE

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

GDFjbxc9as

Mutex

Gx0edRwRzsDs0gzwQ

Attributes
  • delay

    1

  • install

    false

  • install_file

    GoogleUpdates.exe

  • install_folder

    %AppData%

  • pastebin_config

    https://pastebin.com/raw/QLnQD5yh

aes.plain

Targets

    • Target

      388f5d7ff3ff93d7dff0a22255a2ffa32740f7680b33969facff591128d2d500.exe

    • Size

      47KB

    • MD5

      aa21749730921b1f60479e48967e2114

    • SHA1

      72598b4dd4f8117413e262c2a68250b1850bbfe1

    • SHA256

      388f5d7ff3ff93d7dff0a22255a2ffa32740f7680b33969facff591128d2d500

    • SHA512

      89bced8d00940856a30a9ecf0706eab99599419ae6c1e6de98ce79d5983ca80478ecc2b285a14a23c757b8850286ea77cd6681d37cf70b833338d0765bca8d77

    • SSDEEP

      768:60ORLQlmfJfgEEdaKnSL79nXIhJwq24HlHvKNu9k0A3whM80rZsd7/lZVc6KNE:HcLQlmfbCeegqxHb9s3Mvqs9/lZVclNE

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks