Resubmissions

17/01/2025, 14:07

250117-rfc2ss1qam10

16/01/2025, 20:28

250116-y84hsaykdl10

General

  • Target
    Spotify.exe
  • Size 98KB
  • Sample250117-rfc2ss1qam
  • SHA256 ecd287798f2e6597b2e4568817159e2b3b0b502990694e7bf8f58f90b73685e9
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • asyncrat

Botnet
  • Default

C2
  • Jamuro-52920.portmap.io:52920

Attributes
  • delay

    1

  • install

    true

  • install_file

    Rmc.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target
      Spotify.exe
    • Size 98KB
    • SHA256 ecd287798f2e6597b2e4568817159e2b3b0b502990694e7bf8f58f90b73685e9
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Async RAT payload

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks