Analysis
-
max time kernel
178s -
max time network
43s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
26-08-2022 06:32
General
-
Target
aCRAEzePNKKgoZZ.exe
-
Size
47KB
-
MD5
5a723bd7aa2c6efdc3e9d7cf30b28b57
-
SHA1
931e33a992c56302809e7d8b7a116474490b6753
-
SHA256
53e13e8a6fb67554f49c8270523d068835894c4fb302ce133004813e490654ae
-
SHA512
d03d1d6a23f7e23f2757bbb64e55dfd8e852343da0c347e2098994ee8a353191451317465e1f841ccc6b596e23b91cf9f7d646c6f0614510d1c31c020a31d734
-
SSDEEP
768:dOEuILWCKi+DiBtelDSN+iV08Ybyge4uCsRr5h7zvEgK/J9lZVc6KN:dOtmBtKDs4zb1JDstD7znkJ3ZVclN
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
1.0.7
Botnet
Default
C2
127.0.0.1:8080
Mutex
DcRatMutex_qwqdanchun
Attributes
-
delay
1
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers.
-
Async RAT payload 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\aCRAEzePNKKgoZZ.exe"C:\Users\Admin\AppData\Local\Temp\aCRAEzePNKKgoZZ.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
72KB