asyncrat | 406b09d35a24102b916fb7dd44e573f480796047cb5cde313e4a48c2cd73fc6d

Analysis

max time kernel
93s
max time network
132s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
30-11-2022 13:42

Target

406b09d35a24102b916fb7dd44e573f480796047cb5cde313e4a48c2cd73fc6d.exe
Size

42KB
MD5

5567263b52d17123678de6b0b82e01be
SHA1

7833228837d04bfdf38c2cec525ad715a0f79e63
SHA256

406b09d35a24102b916fb7dd44e573f480796047cb5cde313e4a48c2cd73fc6d
SHA512

79c01268cfe0a730b87ba4fb9feb3960b1f3383ffbc55ff4a8fad3b5b239f526446525c14eff482b400fe7579e04c5d0630bf61b848bf506ac3e0f748bdefb51
SSDEEP

768:t1zdCUT0aIvzImZahaMdEf/VoDCOz9eKjbegp1NL5n:D34aazHUef/VbOReGbegbHn

Score

10^/10

asyncrat rat

AsyncRat
AsyncRAT is designed to remotely monitor and control other computers.
rat asyncrat
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4944 3996 WerFault.exe 406b09d35a24102b916fb7dd44e573f480796047cb5cde313e4a48c2cd73fc6d.exe

pid	pid_target	process	target process
4944	3996	WerFault.exe	406b09d35a24102b916fb7dd44e573f480796047cb5cde313e4a48c2cd73fc6d.exe

C:\Users\Admin\AppData\Local\Temp\406b09d35a24102b916fb7dd44e573f480796047cb5cde313e4a48c2cd73fc6d.exe
"C:\Users\Admin\AppData\Local\Temp\406b09d35a24102b916fb7dd44e573f480796047cb5cde313e4a48c2cd73fc6d.exe"
1⤵
PID:3996
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 3996 -s 772
  2⤵
  - Program crash
  PID:4944

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 412 -p 3996 -ip 3996
1⤵
PID:3192

memory/3996-132-0x0000000000FA0000-0x0000000000FB0000-memory.dmp

Filesize
64KB

Download
memory/3996-133-0x00007FFBC8BD0000-0x00007FFBC9691000-memory.dmp

Filesize
10.8MB

Download
memory/3996-134-0x00007FFBC8BD0000-0x00007FFBC9691000-memory.dmp

Filesize
10.8MB

Download