Analysis

  • max time kernel
    139s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7v20210410
  • submitted
    21-04-2021 02:48

General

  • Target

    mdQtJBe7.exe

  • Size

    45KB

  • MD5

    af08820a00cb5403b64415002825075d

  • SHA1

    aa2518dab0eea9bfd079e3a28bb2cb50d3a20e19

  • SHA256

    23d4837df84a76f96c674581c96e6a1729bac2981787d3b36ac5149d861f13e5

  • SHA512

    27cd53f633196a28981cbc9bd6361790aebba19fd2aa05da100e5681416292c6cf1b120915b294812cc5eef531c9b980d90583a5ec7eb04ffaa9badac9d2889f

Score
10/10

Malware Config

Signatures

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers.

Processes

  • C:\Users\Admin\AppData\Local\Temp\mdQtJBe7.exe
    "C:\Users\Admin\AppData\Local\Temp\mdQtJBe7.exe"
    1⤵
      PID:1420

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1420-60-0x00000000003B0000-0x00000000003B1000-memory.dmp
      Filesize

      4KB

    • memory/1420-62-0x0000000074FB1000-0x0000000074FB3000-memory.dmp
      Filesize

      8KB

    • memory/1420-63-0x0000000004E10000-0x0000000004E11000-memory.dmp
      Filesize

      4KB