General

  • Target

    AsyncRAT v2.1.rar

  • Size

    5.8MB

  • Sample

    250330-tssn5avlt2

  • MD5

    d0cfadf8cb435fdb4610ff0fa23bdd02

  • SHA1

    b4f83eb982ea4b98706aa381ef20450a437ebb0f

  • SHA256

    b08ab7f2566b8d9d5de71faa1eb1bcea350ef22061341b36426ce7dcb47cd461

  • SHA512

    5aed232560bba0aa62e99581945e55773e54cec39aea67bc64e6f07c90e459a4e9cc15a84ba2791763bac4da686a9c19bb1417c05e06bd93b45cc9086fb00786

  • SSDEEP

    98304:5ucP8rf59Arnon3aOsenEr2gddv2uPUsTZgjdwPEfYP+OlNld24am:5b8dWnon3ZErH92uZTeuNPrlNP2+

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

mimihard.ddns.net:1900

mimihard.ddns.net:5353

mimihard.ddns.net:3702

mimihard.ddns.net:5355

mimihard.ddns.net:61025

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain
aes.plain

Targets

    • Target

      AsyncRAT v2.1.rar

    • Size

      5.8MB

    • MD5

      d0cfadf8cb435fdb4610ff0fa23bdd02

    • SHA1

      b4f83eb982ea4b98706aa381ef20450a437ebb0f

    • SHA256

      b08ab7f2566b8d9d5de71faa1eb1bcea350ef22061341b36426ce7dcb47cd461

    • SHA512

      5aed232560bba0aa62e99581945e55773e54cec39aea67bc64e6f07c90e459a4e9cc15a84ba2791763bac4da686a9c19bb1417c05e06bd93b45cc9086fb00786

    • SSDEEP

      98304:5ucP8rf59Arnon3aOsenEr2gddv2uPUsTZgjdwPEfYP+OlNld24am:5b8dWnon3ZErH92uZTeuNPrlNP2+

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Async RAT payload

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks