Overview

overview

10

Static

static

3

client.exe

windows11-21h2-x64

10

client.pyc

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    client.exe
  • Size 7.8MB
  • Sample260301-sd558sfv8c
  • SHA256 56e9654356d682a364c505b872652e12ffb6de2d4a8dce02d0673b697679423f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
asyncratdefaultdefense_evasionexecutionpersistencepyinstallerrat

Malware Config

Extracted

Family

  • asyncrat

Botnet

  • Default

C2

  • 5.83.128.112:4444

  • 5.83.128.112:3333

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

  • local_host

    127.0.0.1

aes.plain

Targets

    • Target
      client.exe
    • Size 7.8MB
    • SHA256 56e9654356d682a364c505b872652e12ffb6de2d4a8dce02d0673b697679423f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    defaultdefense_evasionexecutionasyncratpersistencerat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    • Loads dropped DLL

    • Indicator Removal: Clear Persistence

      Clear artifacts associated with previously established persistence like scheduletasks on a host.

      defense_evasion
    behavioral1
    • Target
      client.pyc
    • Size 114KB
    • SHA256 f1b42b90f2ea511307902fe940f8c4db5dcb9184b7e0014a33d14af91c69c205
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    behavioral2

MITRE ATT&CK Enterprise v16

Tasks