Overview

overview

10

Static

static

3

3677d4f5c9...58.exe

windows7-x64

10

3677d4f5c9...58.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3677d4f5c9958bfaaa37b3a49f3ab3b70d78e40c717280c3add5df4442c8fc58.exe

  • Size

    2.6MB

  • Sample

    240704-bphqmswgmq

  • MD5

    f752dec00ecccadadfbd35c32ae16bf5

  • SHA1

    464748d9b42ebe463c6da73b1836517442694e26

  • SHA256

    3677d4f5c9958bfaaa37b3a49f3ab3b70d78e40c717280c3add5df4442c8fc58

  • SHA512

    bcec21635021cbad0ca4be0ae00cd23ff50f03204504e3c039c288674ee75cde7b95bb203714f42c355d1b3c43b006ae5c4c34dd27c65511d22c00790155b9f0

  • SSDEEP

    12288:uRIzYTTBKteXpbUGbLoneSXepXrsM975Cogg8KZ:uRI89la4bCoUKZ

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

betterdays4me.duckdns.org:6606

betterdays4me.duckdns.org:7707

betterdays4me.duckdns.org:8808
Mutex

fULNLY9PC39i

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      3677d4f5c9958bfaaa37b3a49f3ab3b70d78e40c717280c3add5df4442c8fc58.exe

    • Size

      2.6MB

    • MD5

      f752dec00ecccadadfbd35c32ae16bf5

    • SHA1

      464748d9b42ebe463c6da73b1836517442694e26

    • SHA256

      3677d4f5c9958bfaaa37b3a49f3ab3b70d78e40c717280c3add5df4442c8fc58

    • SHA512

      bcec21635021cbad0ca4be0ae00cd23ff50f03204504e3c039c288674ee75cde7b95bb203714f42c355d1b3c43b006ae5c4c34dd27c65511d22c00790155b9f0

    • SSDEEP

      12288:uRIzYTTBKteXpbUGbLoneSXepXrsM975Cogg8KZ:uRI89la4bCoUKZ

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks