Analysis

  • max time kernel
    251s
  • max time network
    316s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-11-2022 10:01

General

  • Target

    d7a6712308b687a34c4fae5eff1109e50a8abacb80844f5df80ca6bc05007b00.exe

  • Size

    39KB

  • MD5

    9a6b003905fe1d368405ce5fe733e4a5

  • SHA1

    21b54b3cd1756d70d2cd82fc06065b8d2a8d1ea8

  • SHA256

    d7a6712308b687a34c4fae5eff1109e50a8abacb80844f5df80ca6bc05007b00

  • SHA512

    1ef2c3b1d11d2dc3b6a98687412e9af47730ad92b76900c8855c31ee74fbb0cee90529143f40cea29ee431f2490fb6c71532e84eda9164184d59003e35dec589

  • SSDEEP

    384:eFauq/XQQiUUb+DoO6Gf780HKp+31ENDlDxmms29PgdxqArKUvQiDMNxyzzYOCja:e4l/pCGjv+vxc29Idx/PvvOyrxkhhA

Score
10/10

Malware Config

Signatures

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers.

Processes

  • C:\Users\Admin\AppData\Local\Temp\d7a6712308b687a34c4fae5eff1109e50a8abacb80844f5df80ca6bc05007b00.exe
    "C:\Users\Admin\AppData\Local\Temp\d7a6712308b687a34c4fae5eff1109e50a8abacb80844f5df80ca6bc05007b00.exe"
    1⤵
      PID:448

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/448-132-0x0000000000A80000-0x0000000000A8E000-memory.dmp

      Filesize

      56KB

    • memory/448-133-0x00007FFF1DDF0000-0x00007FFF1E8B1000-memory.dmp

      Filesize

      10.8MB

    • memory/448-134-0x00007FFF1DDF0000-0x00007FFF1E8B1000-memory.dmp

      Filesize

      10.8MB