Analysis
-
max time kernel
55s -
max time network
53s -
platform
windows10-2004_x64 -
resource
win10v2004-20231130-en -
resource tags
-
submitted
06-12-2023 01:08
General
-
Target
bSkM.exe
-
Size
47KB
-
MD5
83e1f30671acc3ca235a7bfa4dce9e15
-
SHA1
ea23d4324743d21917d7212fe59d19c894c13583
-
SHA256
e879574d750ebd02a3affea08fca995185c05ed7deda29882463b3f81c25d6e1
-
SHA512
ab7fe4eeb83e8e13cbfb416750f7663aa79f136925862010a16ee0011ed9c343c2f00555466c8aa784ac1782bf272d5a94d6b0eb1e833ab60e46a8d28d5492c6
-
SSDEEP
768:d6T3ILNCKi+DiBtelDSN+iV08YbygeKXmU2LvEgK/J9lZVc6KN:d6YmBtKDs4zb1RmUYnkJ3ZVclN
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
1.0.7
Botnet
jojojoj
C2
window10.duckdns.org:2016
Mutex
5&TY#W635yw4
Attributes
-
delay
1
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Async RAT payload 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bSkM.exe"C:\Users\Admin\AppData\Local\Temp\bSkM.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
72KB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
10.8MB