Analysis
-
max time kernel
292s -
max time network
310s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
02-06-2023 05:02
General
-
Target
WinZa.exe
-
Size
1024.0MB
-
MD5
eafb2545fe1257f2c2371c7f97d91707
-
SHA1
1e8b3ec9b4dad751fa6761a0e9f72e22baa92ca2
-
SHA256
89eee2907f93432399fa3efddaa6d6b0080a80d07bd53878d38f51fd20f7db2d
-
SHA512
b12fc2694469ad6df39f24ea44d9758e8df5f4a7c94ca870fd6a0f1fa232f642be822def9060f93558845044a2a4c930002fcc2cdec88d5dbd73fd08b8545300
-
SSDEEP
12288:E4mT/RcXtvyJdBQhXVQpfDv4alfZqby13caYgd2DNSD/+6FO5HOfI:E4C/6XtvWBmQpfT4gcaYgdkC/OOfI
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
0.5.7B
Botnet
Default
C2
95.214.27.226:6606
95.214.27.226:7707
95.214.27.226:8808
Mutex
AsyncMutex_6SI8OkPnk
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Async RAT payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\WinZa.exe"C:\Users\Admin\AppData\Local\Temp\WinZa.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
84KB
-
Filesize
72KB
-
Filesize
512KB
-
Filesize
512KB