General

  • Target

    AsyncClient.exe

  • Size

    45KB

  • Sample

    250302-xqb55ssjs7

  • MD5

    29c993d7f5e90070cd2e5ceb7f479548

  • SHA1

    76d69c5821ee8387fe0aa0a5c74010f9d18dbca7

  • SHA256

    bcfb57a38dd626aa06c760bdd1f5b15c9545fe0a5bcebc06cc6560d9e84e316d

  • SHA512

    aba791fc1d718410272767e0df18f94390570745803838f1bdd75ae3ccd373d9b1fb37363730b0f19dbb4c9fcae2b3d205721e1d5c758ff11956a210d324b7ba

  • SSDEEP

    768:KuETKT0k3qXWUrV6e1mo2qyIQKjPGaG6PIyzjbFgX3ikES877qe/pkBDZSx:KuETKT0cE2/1KTkDy3bCXSG8HqkpSdSx

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

197.48.74.234:6606

197.48.74.234:8888

Mutex

MIV0Fi574gMQ

Attributes
  • delay

    3

  • install

    false

  • install_file

    ratatoulie.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      AsyncClient.exe

    • Size

      45KB

    • MD5

      29c993d7f5e90070cd2e5ceb7f479548

    • SHA1

      76d69c5821ee8387fe0aa0a5c74010f9d18dbca7

    • SHA256

      bcfb57a38dd626aa06c760bdd1f5b15c9545fe0a5bcebc06cc6560d9e84e316d

    • SHA512

      aba791fc1d718410272767e0df18f94390570745803838f1bdd75ae3ccd373d9b1fb37363730b0f19dbb4c9fcae2b3d205721e1d5c758ff11956a210d324b7ba

    • SSDEEP

      768:KuETKT0k3qXWUrV6e1mo2qyIQKjPGaG6PIyzjbFgX3ikES877qe/pkBDZSx:KuETKT0cE2/1KTkDy3bCXSG8HqkpSdSx

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

MITRE ATT&CK Enterprise v15

Tasks