Analysis

  • max time kernel
    205s
  • max time network
    217s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-01-2023 21:28

General

  • Target

    62d5a0760f15a3f1799d15e2155541b168227ee57e0061b23599d594012b4a82.exe

  • Size

    196KB

  • MD5

    82d13965c50b05289871cbecacb8b47b

  • SHA1

    ceff66dde0ba106a68536af2c57dced5bfc07b92

  • SHA256

    62d5a0760f15a3f1799d15e2155541b168227ee57e0061b23599d594012b4a82

  • SHA512

    cc72552b7eee89832b2500fd2438bdf6f3ae781e48cf5b914d4a62589484804c57306563b86fd8daa47b9e8ce22dd8f70e7aeccb0f2314a921d53a6a09dc8c7a

  • SSDEEP

    3072:b2Oz3GJdaCTgPvd7DKRKG64UWaLsCoEt8k2HFWUcJoblJDJXufXdvu:5zWJFc3d3KRKYesCowKYoblJdXufhu

Score
10/10

Malware Config

Signatures

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers.

Processes

  • C:\Users\Admin\AppData\Local\Temp\62d5a0760f15a3f1799d15e2155541b168227ee57e0061b23599d594012b4a82.exe
    "C:\Users\Admin\AppData\Local\Temp\62d5a0760f15a3f1799d15e2155541b168227ee57e0061b23599d594012b4a82.exe"
    1⤵
      PID:2540

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2540-132-0x0000000000C10000-0x0000000000C18000-memory.dmp
      Filesize

      32KB

    • memory/2540-133-0x0000000005430000-0x00000000054CC000-memory.dmp
      Filesize

      624KB