Overview

overview

10

Static

static

6BD0F63D69...88.exe

windows7_x64

10

6BD0F63D69...88.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    6BD0F63D69EBAA8E28B21E9B0F5C02E05C1213535B288.exe
  • Size 203KB
  • Sample210504-h9saadlekn
  • SHA256 6bd0f63d69ebaa8e28b21e9b0f5c02e05c1213535b2881d080db1d09082e9f1d
  • MD5 SHA1 SHA512
Score
10/10
asyncratpersistencerat

Malware Config

Targets

    • Target
      6BD0F63D69EBAA8E28B21E9B0F5C02E05C1213535B288.exe
    • Size 203KB
    • SHA256 6bd0f63d69ebaa8e28b21e9b0f5c02e05c1213535b2881d080db1d09082e9f1d
    • MD5 SHA1 SHA512
    Score
    10/10
    asyncratpersistencerat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

      ratasyncrat

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks