Analysis
- max time kernel
13s - max time network
142s - platform
windows10_x64 - resource
win10v20210410 - submitted
25/04/2021, 14:18
General
- Target 8F6hfhex.exe
- Size 47KB
- Sample210425-45hp2qqchs
- SHA256 fb9bf51c0e56eace193c9c38ef65c297f5ec1bb0a0e2a3f05e9ec35efe094bb0
Score
10/10
Malware Config
Signatures
- AsyncRat
AsyncRAT is designed to remotely monitor and control other computers.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8F6hfhex.exe"C:\Users\Admin\AppData\Local\Temp\8F6hfhex.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3988-114-0x0000000000BA0000-0x0000000000BA1000-memory.dmp
memory/3988-116-0x00000000054A0000-0x00000000054A1000-memory.dmp
memory/3988-117-0x0000000005BC0000-0x0000000005BC1000-memory.dmp
memory/3988-118-0x0000000006160000-0x0000000006161000-memory.dmp
memory/3988-119-0x0000000005CD0000-0x0000000005CD1000-memory.dmp