Overview

overview

10

Static

static

10

2040e0fb90...5d.exe

windows7_x64

10

2040e0fb90...5d.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    154s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-en-20211208
  • submitted
    01-02-2022 07:59

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2040e0fb90da8f25ccd622f68c07fa04a59ff3c36f02c13d3c3e5b4b8ed5325d.exe

  • Size

    46KB

  • MD5

    0a8a9adccde79eeafe452113523cfe35

  • SHA1

    a35824e3aafcfbf084f90f319505bf3f45c33615

  • SHA256

    2040e0fb90da8f25ccd622f68c07fa04a59ff3c36f02c13d3c3e5b4b8ed5325d

  • SHA512

    46b894f0931d0ff30c47e56e0d3f869ce1af6126534524c12740e1d374215b1bc7b6c22e3c2a818ddc92c9220925a5a955fecbb57babe1a6c2219c212c61ec11

Score
10/10
asyncratrat

Malware Config

Signatures

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers.

    ratasyncrat
  • Async RAT payload 1 IoCs
    rat
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2040e0fb90da8f25ccd622f68c07fa04a59ff3c36f02c13d3c3e5b4b8ed5325d.exe
    "C:\Users\Admin\AppData\Local\Temp\2040e0fb90da8f25ccd622f68c07fa04a59ff3c36f02c13d3c3e5b4b8ed5325d.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/848-54-0x00000000003C0000-0x00000000003D2000-memory.dmp
    Filesize

    72KB

    Download
  • memory/848-55-0x000000001B020000-0x000000001B022000-memory.dmp
    Filesize

    8KB

    Download