Analysis
-
max time kernel
159s -
max time network
169s -
platform
windows7_x64 -
resource
win7-20220715-en -
resource tags
-
submitted
10-08-2022 11:00
General
-
Target
pack/AfDTM.exe
-
Size
47KB
-
MD5
81a1f53a7e0431c385b3537c9e86e9ca
-
SHA1
fee349b7f96843c91ed47a19f9aa2f58520ddb1c
-
SHA256
c47cc8f39a3d676895f1bbb92f94d50d5e5d20f7be816b76c09b08cef4d380a7
-
SHA512
626f5d74a98e3b8cc8f3be3ea7d5611918731a35331dad3603d18426cefd694e6d66b46fb277c46300792c3da930022fc6db28afb68a6e9e4d974a90c9e091c4
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
1.0.7
Botnet
Default
C2
192.168.1.4:8848
Mutex
DcRatMutex_qwqdanchun
Attributes
-
delay
1
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers.
-
Async RAT payload 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\pack\AfDTM.exe"C:\Users\Admin\AppData\Local\Temp\pack\AfDTM.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
72KB