General

  • Target

    173715408423735d5fc9f62cdb7608cc4db02df099de06ff40bf59965599d2fb44102c15f8833.dat-decoded.exe

  • Size

    47KB

  • Sample

    250117-2rm19avqaz

  • MD5

    d6d801d6beec374d2af40a2eb33fac14

  • SHA1

    a279e37b86e4560db2ec94819d7d865af9a45e0b

  • SHA256

    87927528e6b2f242190828e6951260e068ba16ab6250adbcba190ef8ad459a5a

  • SHA512

    072854076ed1902105d7f94d7bfb9833aaf7dcf7055a757483c7f83647f003ef7eb88615f6da6cef56bf6c1c56c9f03a6e37c6e84eb6eea1a70603ef287e989f

  • SSDEEP

    768:xGq+s3pUtDILNCCa+DiugjAWksLqR2k8A0Pix8Yb4geDf5nvEgK/JLZVc6KN:8q+AGtQOuLWnLAPzbvOnkJLZVclN

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

Server

C2

drpras.duckdns.org:35550

Mutex

DcRatMutex_uHytFrD

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      173715408423735d5fc9f62cdb7608cc4db02df099de06ff40bf59965599d2fb44102c15f8833.dat-decoded.exe

    • Size

      47KB

    • MD5

      d6d801d6beec374d2af40a2eb33fac14

    • SHA1

      a279e37b86e4560db2ec94819d7d865af9a45e0b

    • SHA256

      87927528e6b2f242190828e6951260e068ba16ab6250adbcba190ef8ad459a5a

    • SHA512

      072854076ed1902105d7f94d7bfb9833aaf7dcf7055a757483c7f83647f003ef7eb88615f6da6cef56bf6c1c56c9f03a6e37c6e84eb6eea1a70603ef287e989f

    • SSDEEP

      768:xGq+s3pUtDILNCCa+DiugjAWksLqR2k8A0Pix8Yb4geDf5nvEgK/JLZVc6KN:8q+AGtQOuLWnLAPzbvOnkJLZVclN

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

MITRE ATT&CK Matrix

Tasks