asyncrat | 8bbfd9ff433b87b7e8586034634f986c249e6a2d176d34d2b528ad9f3006fdfc

General

Target
8bbfd9ff433b87b7e8586034634f986c249e6a2d176d34d2b528ad9f3006fdfc
Size 45KB
Sample261029-xyg2cset4z
SHA256 8bbfd9ff433b87b7e8586034634f986c249e6a2d176d34d2b528ad9f3006fdfc
MD5 1c03c18c823e91ed1dfc8fd973d8802a
SHA1 69153f6dc52cf6b35b662b7c8fb2c696c979fc07
SHA512 8b7f1626d1c35731c1823014a8c9d05a9b83d4d989e07e6e67293a0a864a2d5ce3255e5f32faf6ab08cb24cb5c817feb1e53abcf32f41f039e5365977239a750
SSDEEP 768:ZuYART4Ir9LWU3NxCmo2qZYGXDahWKsjbdgX3imEJUBfrpcDZsf+:ZuYART4UA2J2+gKcbKXSmEJUBGdsf+
TLSH
T1582319003BE9812BF2BE4F7899F2614545BAF2633603D65D1CC8419B5613FC6CA52AFA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

rr88.gratis:443
rr88.gratis:8080
www.rr88.gratis:443
www.rr88.gratis:8080
c2.rr88.gratis:443
c2.rr88.gratis:8080
backdoor.rr88.gratis:443
backdoor.rr88.gratis:8080
rr88.channel:443
rr88.channel:8080
www.rr88.channel:443
www.rr88.channel:8080
c2.rr88.channel:443
c2.rr88.channel:8080
backdoor.rr88.channel:443
backdoor.rr88.channel:8080
rr888.co:443
rr888.co:8080
www.rr888.co:443
www.rr888.co:8080
c2.rr888.co:443
c2.rr888.co:8080
backdoor.rr888.co:443
backdoor.rr888.co:8080
rr88tv.com:443
rr88tv.com:8080
www.rr88tv.com:443
www.rr88tv.com:8080
c2.rr88tv.com:443
c2.rr88tv.com:8080
backdoor.rr88tv.com:443
backdoor.rr88tv.com:8080
rr88.health:443
rr88.health:8080
www.rr88.health:443
www.rr88.health:8080
c2.rr88.health:443
c2.rr88.health:8080
backdoor.rr88.health:443
backdoor.rr88.health:8080

Mutex

zRDBhZoBiLW3

Attributes

delay
0
install
false
install_folder
AppData

aes.plain

Targets

- Target
  8bbfd9ff433b87b7e8586034634f986c249e6a2d176d34d2b528ad9f3006fdfc
- Size 45KB
- SHA256 8bbfd9ff433b87b7e8586034634f986c249e6a2d176d34d2b528ad9f3006fdfc
- MD5 1c03c18c823e91ed1dfc8fd973d8802a
- SHA1 69153f6dc52cf6b35b662b7c8fb2c696c979fc07
- SHA512 8b7f1626d1c35731c1823014a8c9d05a9b83d4d989e07e6e67293a0a864a2d5ce3255e5f32faf6ab08cb24cb5c817feb1e53abcf32f41f039e5365977239a750
- SSDEEP 768:ZuYART4Ir9LWU3NxCmo2qZYGXDahWKsjbdgX3imEJUBfrpcDZsf+:ZuYART4UA2J2+gKcbKXSmEJUBGdsf+
- TLSH
  T1582319003BE9812BF2BE4F7899F2614545BAF2633603D65D1CC8419B5613FC6CA52AFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

default discovery asyncrat rat
- Family: AsyncRat
  AsyncRAT is designed to remotely monitor and control other computers written in C#.
  rat asyncrat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

System Network Configuration Discovery

1

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Family: AsyncRat

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2