Overview

overview

10

Static

static

runhost.exe

windows7-x64

10

runhost.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    42s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    05-10-2022 04:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    runhost.exe

  • Size

    207KB

  • MD5

    3121b653ac435525b280ae5a8a13752e

  • SHA1

    4da6155dabd17f85490eeeb2279d530b18f70baf

  • SHA256

    d5de35fb4f59fa6cee43139f38453572dde8fd6fd1a8e22a3747dfa4b226d043

  • SHA512

    ccb1a3fd47dc0459d9f0699899614d115e434431c9373a1a37f5a2379f82268e1fb3072d9785bc07db2f0c9d5e394996ec0f18f13fac2cb6145f316a8c588382

  • SSDEEP

    1536:kdEDQS+WTbKk/TlB8OhX2JN7lSG97JtLFiKjdRasOp/2Q46:kWD/+irJB8OR2JzZ7JtLsKC7el6

Score
10/10
asyncratrat

Malware Config

Signatures

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers.

    ratasyncrat
  • Async RAT payload 1 IoCs
    rat

Processes

  • C:\Users\Admin\AppData\Local\Temp\runhost.exe
    "C:\Users\Admin\AppData\Local\Temp\runhost.exe"
    1⤵
      PID:1280

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1280-54-0x0000000000AC0000-0x0000000000AFA000-memory.dmp
      Filesize

      232KB

      Download
    • memory/1280-55-0x0000000000250000-0x0000000000262000-memory.dmp
      Filesize

      72KB

      Download