Analysis
-
max time kernel
123s -
max time network
149s -
platform
windows10_x64 -
resource
win10v20210408 -
submitted
05-05-2021 19:03
General
-
Target
VRLuMTic.exe
-
Size
45KB
-
MD5
8d039cde4fb365b31d84aab6db00f230
-
SHA1
e935a05d2c04c952929760b283a6c76a233c6b3a
-
SHA256
a844cc35141ecd43e40f86de60070e578cb89278877938ad409506bed45696cd
-
SHA512
a1b05e103b14999e6fd67536136beb0554161e86a0572e62acd845766ae472a570729dece993f5ef7eb0a9acfb3a8756dc4106c9af8dfa384e60352ade3cece1
Score
10/10
Malware Config
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\VRLuMTic.exe"C:\Users\Admin\AppData\Local\Temp\VRLuMTic.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4044-114-0x00000000008C0000-0x00000000008C1000-memory.dmpFilesize
4KB
-
memory/4044-116-0x0000000005130000-0x0000000005131000-memory.dmpFilesize
4KB
-
memory/4044-117-0x0000000005A50000-0x0000000005A51000-memory.dmpFilesize
4KB
-
memory/4044-118-0x0000000005FF0000-0x0000000005FF1000-memory.dmpFilesize
4KB
-
memory/4044-119-0x0000000005AF0000-0x0000000005AF1000-memory.dmpFilesize
4KB