Overview

overview

10

Static

static

5

Rechnung 5...__.exe

windows7-x64

10

Rechnung 5...__.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    25022025_1609_25022025_Rechnung57698020nichtkorrekt.pdf.uue

  • Size

    476KB

  • Sample

    250225-tp164avq19

  • MD5

    d143723aff2e03a17a6a1245bb483a47

  • SHA1

    d7bc2601a9cbc05375cea5828564f4fe778f27ba

  • SHA256

    dde26455983823755879ad9bc5340a020cb8d87352f1174114286357c0f4f3e9

  • SHA512

    fdebee30e76d8ea34718c0426d452f48a86c550bafaa6961510aa6386632ab03cd6d81f5d69373a5613bff35c6172e91e7fe078fa55439e27efd1019feac4c46

  • SSDEEP

    12288:Kv8kmII4RUau2sMUsTPlpr9yML4WqJKzO68Dys7wOY:ppr4RUau2sMxP8ML4Wqi38e5Z

Score
10/10
asyncratdefaultdiscoveryrat

Malware Config

Extracted

Family

asyncrat

Botnet

Default

C2

5.253.247.7:4114

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Rechnung 57698020 nicht korrekt.pdf/Rechnung 57698020 nicht korrekt.pdf________________________________________________________________________________________________________________.exe

    • Size

      1.0MB

    • MD5

      bb8693c961ba55d38f76a77494a37dd0

    • SHA1

      e656b1f51305aeb01fc5ae141e8db999c7a15496

    • SHA256

      fce0542aa373126205c1c38161dd9adefc05844e616b9bd0fa49d595e634c407

    • SHA512

      00813fd03ead3448adb7c2e0f4fe543229188d09a98199cbdde0d630fb5983de94b75d4182ea0bc6bdfc247e5d13f56e2efdba1ae39ce58ebfd41ce6b7052d9c

    • SSDEEP

      24576:+u6J33O0c+JY5UZ+XC0kGso6Fauk1Yi8fMM6WY:Qu0c++OCvkGs9Fa91Yii5Y

    Score
    10/10
    asyncratdefaultdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks