Overview

overview

10

Static

static

10

03_pgr.exe

windows7_x64

10

03_pgr.exe

windows10_x64

10

Analysis

  • max time kernel
    142s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7v20210410
  • submitted
    02-05-2021 22:59

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    03_pgr.exe

  • Size

    47KB

  • MD5

    c4416067ed7bcbe5854934ba713681e4

  • SHA1

    29367eecf704df9ede64072d99399989c0d79793

  • SHA256

    a7ae234395f99ac1eff57feecf9727232f638c314d050271321fc475cda9f58a

  • SHA512

    ab796b88c0b7d017f217efbd8aa146de883867a03bf880c9832bd45f0c6e687e4ba5ec07410c735eeef4cc29ba52cec5e170148f95ad3208cf798dc1ead8ace2

Score
10/10
asyncratrat

Malware Config

Signatures

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers.

    ratasyncrat
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\03_pgr.exe
    "C:\Users\Admin\AppData\Local\Temp\03_pgr.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1048-59-0x00000000010E0000-0x00000000010E1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/1048-61-0x0000000075721000-0x0000000075723000-memory.dmp
    Filesize

    8KB

    Download
  • memory/1048-62-0x0000000000650000-0x0000000000651000-memory.dmp
    Filesize

    4KB

    Download