General

  • Target
    333.exe
  • Size 48KB
  • Sample260812-qrc1hayanh
  • SHA256 c4c9d632093236533f7fb1ccbd509c27662376a31ed272b1a2ba71ed99bda300
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • asyncrat

Version
  • 0.5.8

Botnet
  • Default

C2
  • santabarbaradrive.com.co/:6606

  • santabarbaradrive.com.co/:7707

  • santabarbaradrive.com.co/:8808

  • santabarbaradrive.com.co/:80

  • santabarbaradrive.com.co/:8080

  • santabarbaradrive.com.co/:443

  • santabarbaradrive.com.co/:8443

  • cdn882.com/vi-vn/:6606

  • cdn882.com/vi-vn/:7707

  • cdn882.com/vi-vn/:8808

  • cdn882.com/vi-vn/:80

  • cdn882.com/vi-vn/:8080

  • cdn882.com/vi-vn/:443

  • cdn882.com/vi-vn/:8443

  • starinfoalerts.in/:6606

  • starinfoalerts.in/:7707

  • starinfoalerts.in/:8808

  • starinfoalerts.in/:80

  • starinfoalerts.in/:8080

  • starinfoalerts.in/:443

Mutex
  • RrztxHTO7MEw

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target
      333.exe
    • Size 48KB
    • SHA256 c4c9d632093236533f7fb1ccbd509c27662376a31ed272b1a2ba71ed99bda300
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

MITRE ATT&CK Enterprise v16

Tasks