Overview

overview

10

Static

static

7

Neuer Ordn...el.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Neuer Ordner.rar

  • Size

    48.3MB

  • Sample

    250116-y3w7hsxlcz

  • MD5

    d54f5f3c56afed49aea89a522840eeb7

  • SHA1

    5400b96c2ab22e4554f947201be96dee260e42d6

  • SHA256

    5f6759111f931a8c0fd6844f8131a64d8ae9959bb0b3d001dbc7fc81be5ff366

  • SHA512

    38134d6154fc130482dc4bab738a9fe3a6923510dd0483b08d4ba63f0c99da13e08fc22fdf91e8f5e0b822669bee6cf1cd01518da538b199218ba947a5cea2d8

  • SSDEEP

    786432:qrHMh99shKg0fHnYb8dlfGe5b1TArtRq+UZ7/9O8gAbPDmEKJexfq:mHYgKZ/nYA+e9CBRNUNjfgey

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Botnet

Default

C2

127.0.0.1:3232

Attributes
  • delay

    1

  • install

    true

  • install_file

    Rmc.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Neuer Ordner/Anarchy Panel.exe

    • Size

      54.6MB

    • MD5

      94bac1a0cc0dbac256f0d3b4c90648c2

    • SHA1

      4abcb8a31881e88322f6a37cbb24a14a80c6eef2

    • SHA256

      50c2dba1d961e09cb8df397b71bd3b6a32d0ee6dbe886e7309305dc4ba968f94

    • SHA512

      30ecee38d5d641abaf73e09a23c614cb3b8b84aa1f8ff1818e92c1f2b51bf6841d3e51564aecb5efd01a3d98db88f0938e7dd4ee9c74ca5477785c33c969ffd9

    • SSDEEP

      786432:RvcKHU1yll1EcgYwm/7hPo9b9DMs2PTUpRYj:lPU4bZwm/NwEIYj

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • Async RAT payload

      rat

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks