General

  • Target

    Client.exe

  • Size

    3.0MB

  • Sample

    250211-jvha3azrbl

  • MD5

    8f46c856f33bbb279be7a0726f15016b

  • SHA1

    d53277431505498980f1e460f7fcbb6e5f56b98d

  • SHA256

    7b77cc567a3c5e8a31e8abe7404bc2b39198e51d4b3adae736caf5fbe484e2a6

  • SHA512

    4b0bf3fb9b17e7f194c7ae890ebc2946b0b906223c232d2286d9496c4706622ba83a182d492f6810d275a495bbbe40ab15b3a145e552c916be25e7bc6fc4d6f3

  • SSDEEP

    49152:ojOzoGbbNpVlHGLSa9gUBX3B3kNC3H6vUZlr/NFQ:ojO0ENBGLSm

Malware Config

Targets

    • Target

      Client.exe

    • Size

      3.0MB

    • MD5

      8f46c856f33bbb279be7a0726f15016b

    • SHA1

      d53277431505498980f1e460f7fcbb6e5f56b98d

    • SHA256

      7b77cc567a3c5e8a31e8abe7404bc2b39198e51d4b3adae736caf5fbe484e2a6

    • SHA512

      4b0bf3fb9b17e7f194c7ae890ebc2946b0b906223c232d2286d9496c4706622ba83a182d492f6810d275a495bbbe40ab15b3a145e552c916be25e7bc6fc4d6f3

    • SSDEEP

      49152:ojOzoGbbNpVlHGLSa9gUBX3B3kNC3H6vUZlr/NFQ:ojO0ENBGLSm

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • StormKitty

      StormKitty is an open source info stealer written in C#.

    • StormKitty payload

    • Stormkitty family

    • Downloads MZ/PE file

MITRE ATT&CK Enterprise v15

Tasks