General

  • Target
    https://limewire.com/d/kAJWi#IJniQmr2R1
  • Sample260724-tyttdatgkg

Malware Config

Extracted

Family
  • asyncrat

Version
  • 0.5.8

Botnet
  • Default

C2
  • tcp://jsncc-91-230-99-130.run.pinggy-free.link:6606

  • tcp://jsncc-91-230-99-130.run.pinggy-free.link:41601

Mutex
  • iX4hCEOJ4zoh

Attributes
  • delay

    3

  • install

    true

  • install_file

    RobloxUpdate.exe

  • install_folder

    %AppData%

aes.plain

Targets

MITRE ATT&CK Enterprise v16

Tasks