Overview

overview

10

Static

static

10

Roblox(unclose).exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Roblox(unclose).exe

  • Size

    45KB

  • Sample

    250125-vh8s2askav

  • MD5

    11544ff4745a17016a9086bac7c0c83c

  • SHA1

    91440ea21b73beba389c29784be98b8b83c5ee77

  • SHA256

    ec8c79d2dead186bfc98d16e10dea1f01acd654815c1b6a468a427419624d227

  • SHA512

    b357274d5d17b05e580b9785ff8aad57ea87dcb721d46cbe8410e87e651bea2fccfd5f93796fd775947c6d0b134a2bbe138857f13c40fda8c634e02bd5e18b48

  • SSDEEP

    768:ru1a21T3EiJfWUzDydmo2qzConp/JtByBlPI1zjbKgX3i4G03gSjt7Of78BDZ5A:ru1a21T3xq2Rop/J113bdXS7zSJ7/d5

Score
10/10
asyncratdefaultdiscoveryrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

https://d43b-88-230-120-156.ngrok-free.app:80

Mutex

NU2iszyvlx0s

Attributes
  • delay

    3

  • install

    true

  • install_file

    Datamc.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Roblox(unclose).exe

    • Size

      45KB

    • MD5

      11544ff4745a17016a9086bac7c0c83c

    • SHA1

      91440ea21b73beba389c29784be98b8b83c5ee77

    • SHA256

      ec8c79d2dead186bfc98d16e10dea1f01acd654815c1b6a468a427419624d227

    • SHA512

      b357274d5d17b05e580b9785ff8aad57ea87dcb721d46cbe8410e87e651bea2fccfd5f93796fd775947c6d0b134a2bbe138857f13c40fda8c634e02bd5e18b48

    • SSDEEP

      768:ru1a21T3EiJfWUzDydmo2qzConp/JtByBlPI1zjbKgX3i4G03gSjt7Of78BDZ5A:ru1a21T3xq2Rop/J113bdXS7zSJ7/d5

    Score
    10/10
    asyncratdefaultdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • Async RAT payload

      rat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks