Overview

overview

10

Static

static

10

csrss.exe

windows7-x64

10

csrss.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    csrss.exe

  • Size

    48KB

  • MD5

    36a18884c8e35fea7c2cf939e35bb56c

  • SHA1

    f212f55722ef7e4382bd5c59746ff60e26142c47

  • SHA256

    c1ad03476f5a2fe877b28c242eb68db4b0362e75dba1b595d458fce209dd5f28

  • SHA512

    47c2c5c36a0d8cba84af5834b839c96a1e742cd9e0d98772f03b37e02f665996b3f7949e49ed513213350cc5996b1ad10d0a8dc05d5bb9a4fe6ed98a057a22f6

  • SSDEEP

    768:0ujYC71TBEwp/WUTQy9mo2qzqSmHGHwVdgPIazQaWozr0bJLlDc76GoQjHb72cso:0u8A1TBvD2bSmF3FaMaBgbJLF3No6ti1

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    true

  • install_file

    csrss.exe

  • install_folder

    %Temp%

  • pastebin_config

    https://pastebin.com/raw/3Z9zi18j

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat

Files

  • csrss.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections