Overview

overview

10

Static

static

10

a4e4d40fd0...89.exe

windows7_x64

10

a4e4d40fd0...89.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    148s
  • max time network
    160s
  • platform
    windows7_x64
  • resource
    win7-en-20211208
  • submitted
    01-02-2022 04:43

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a4e4d40fd07df5f60ccf8ce1f8657ae5bde6d46132e8a463b5f38805b1a2e889.exe

  • Size

    46KB

  • MD5

    2ec920d1c532498ff39e412ee115874b

  • SHA1

    977d07e8cd63833b2a84dd16c417e9d83b01048d

  • SHA256

    a4e4d40fd07df5f60ccf8ce1f8657ae5bde6d46132e8a463b5f38805b1a2e889

  • SHA512

    9fc9bfd1149a74d9b8b3efe183724d6ebf0a73bbdb8c132c2cd6c243eb076e3f77a5dcf4548c861fdbdb8cab610c1ab581bffefbeecaf7308c188f06d4feebe9

Score
10/10
asyncratrat

Malware Config

Signatures

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers.

    ratasyncrat
  • Async RAT payload 1 IoCs
    rat
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a4e4d40fd07df5f60ccf8ce1f8657ae5bde6d46132e8a463b5f38805b1a2e889.exe
    "C:\Users\Admin\AppData\Local\Temp\a4e4d40fd07df5f60ccf8ce1f8657ae5bde6d46132e8a463b5f38805b1a2e889.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1648

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1648-54-0x0000000000E00000-0x0000000000E12000-memory.dmp
    Filesize

    72KB

    Download
  • memory/1648-55-0x000000001B080000-0x000000001B082000-memory.dmp
    Filesize

    8KB

    Download