General

  • Target

    h.exe

  • Size

    47KB

  • Sample

    250301-z64w7ssqy2

  • MD5

    03424c597882d3daa52bf027798b2e0b

  • SHA1

    2d7fdd69b06226b6cdce05bc0820ad286b3e6b14

  • SHA256

    47ba146b7f2fb94a4793f6fe302b53cab7bd6bbe021b57b389a340a060ff8d7a

  • SHA512

    26a24e11ca9d7e26b44a74ef78108eb2a6aef071380703ab85b0b2ea92a719f4cd2ddbbb590a2837c18ac1cf33000872df242c4c263032d0df28ba955ae7ec90

  • SSDEEP

    768:12uwpFTAY3IQWUe9jqmo2qL2Rxd6jnFiDOPIbSjZ60buZ3adb2g1+bWx3OXWQBDw:12uwpFTA4/256T03bqlbuZ3BXykmGdEx

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

77.100.63.251:5631

Mutex

SXPNYKU9S8ry

Attributes
  • delay

    3

  • install

    true

  • install_file

    Disc367.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      h.exe

    • Size

      47KB

    • MD5

      03424c597882d3daa52bf027798b2e0b

    • SHA1

      2d7fdd69b06226b6cdce05bc0820ad286b3e6b14

    • SHA256

      47ba146b7f2fb94a4793f6fe302b53cab7bd6bbe021b57b389a340a060ff8d7a

    • SHA512

      26a24e11ca9d7e26b44a74ef78108eb2a6aef071380703ab85b0b2ea92a719f4cd2ddbbb590a2837c18ac1cf33000872df242c4c263032d0df28ba955ae7ec90

    • SSDEEP

      768:12uwpFTAY3IQWUe9jqmo2qL2Rxd6jnFiDOPIbSjZ60buZ3adb2g1+bWx3OXWQBDw:12uwpFTA4/256T03bqlbuZ3BXykmGdEx

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Async RAT payload

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks