General
- Target https://limewire.com/d/kAJWi#IJniQmr2R1
- Sample260724-tyttdatgkg
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://limewire.com/d/kAJWi#IJniQmr2R1
Resource
win10v2004-20260513-en
21 signatures
150 seconds
Malware Config
Extracted
Family
-
asyncrat
Version
-
0.5.8
Botnet
-
Default
C2
-
tcp://jsncc-91-230-99-130.run.pinggy-free.link:6606
-
tcp://jsncc-91-230-99-130.run.pinggy-free.link:41601
Mutex
-
iX4hCEOJ4zoh
Attributes
-
delay
3
-
install
true
-
install_file
RobloxUpdate.exe
-
install_folder
%AppData%
aes.plain
Targets
-
- Target https://limewire.com/d/kAJWi#IJniQmr2R1
-
Async RAT payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1