Analysis

  • max time kernel
    148s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    01/09/2023, 16:28

General

  • Target

    ae549e5f222645c4ec05d5aa5e2f0072f4e668da89f711912475ee707ecc871e_JC.exe

  • Size

    26KB

  • MD5

    222cf7fb823aedd40d2b57b2a8d5ea86

  • SHA1

    1f0fce06fd1be6318f4adeee0fd9746667f955ac

  • SHA256

    ae549e5f222645c4ec05d5aa5e2f0072f4e668da89f711912475ee707ecc871e

  • SHA512

    87e6e8a8767208742329a0897d3d6d753aec9681766d14be5a2341025cc9da7b03d18f09412a5f488a5364d4bccfaa2a7268ddb07d7b57e6de3c1796d7accd07

  • SSDEEP

    384:ZIuviQDw7RO3m94yOcTmd8zMcSm1oiV0EOycOZsbs7RAYwQpIf//cteQjRhZEz6/:ZIuvZDwQW9Wd8mm1oI0OsQF3CjzPol

Score
10/10

Malware Config

Signatures

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

  • Async RAT payload 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ae549e5f222645c4ec05d5aa5e2f0072f4e668da89f711912475ee707ecc871e_JC.exe
    "C:\Users\Admin\AppData\Local\Temp\ae549e5f222645c4ec05d5aa5e2f0072f4e668da89f711912475ee707ecc871e_JC.exe"
    1⤵
      PID:1172

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1172-0-0x0000000001020000-0x000000000102C000-memory.dmp

      Filesize

      48KB

    • memory/1172-1-0x0000000074230000-0x000000007491E000-memory.dmp

      Filesize

      6.9MB

    • memory/1172-2-0x00000000005C0000-0x0000000000600000-memory.dmp

      Filesize

      256KB

    • memory/1172-3-0x0000000074230000-0x000000007491E000-memory.dmp

      Filesize

      6.9MB

    • memory/1172-4-0x00000000005C0000-0x0000000000600000-memory.dmp

      Filesize

      256KB