Analysis
-
max time kernel
32s -
max time network
145s -
platform
windows10_x64 -
resource
win10v20210408 -
submitted
21-04-2021 17:03
General
-
Target
3TmC1Zci.exe
-
Size
45KB
-
MD5
7fb03f4814a9a49fb27b2cc324e3bb18
-
SHA1
e514097987e6c7a0396d6aa302cb64357672d7c1
-
SHA256
2f054e75bbe251c38dfa8a3a31d51123d71f80054720c909ed3901e14859c656
-
SHA512
3c0ce89679c54b7ac6950116583d5db4db3ef6f3f02ef0788979978cce8b6159f7e748b3ecf72f42685efd096bb3c7264434081c78f7cb87a6f9d819e98e602e
Score
10/10
Malware Config
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3TmC1Zci.exe"C:\Users\Admin\AppData\Local\Temp\3TmC1Zci.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4000-114-0x0000000000940000-0x0000000000941000-memory.dmpFilesize
4KB
-
memory/4000-116-0x0000000005260000-0x0000000005261000-memory.dmpFilesize
4KB
-
memory/4000-117-0x0000000005A80000-0x0000000005A81000-memory.dmpFilesize
4KB
-
memory/4000-118-0x0000000006160000-0x0000000006161000-memory.dmpFilesize
4KB
-
memory/4000-119-0x0000000005CD0000-0x0000000005CD1000-memory.dmpFilesize
4KB