Analysis
-
max time kernel
142s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
24/01/2024, 16:21
General
-
Target
ppxxpduwoj.exe
-
Size
47KB
-
MD5
27089980fad479efebf3185d69ccddbf
-
SHA1
4a6a5423dd22a8e14a6139093a36dfb8779a17c7
-
SHA256
fc6574ad10963a5edfaa488cfb4ba221eac437c85026b8efe77dbfa55cd01bd1
-
SHA512
8d15153827e25b1e970ef16f598e308c5a7f2155bfb719873beb87bd1ca0b1d19059a07174903099b055d3bfc7e960846f683cc3eb8910e9ab3418afea59c918
-
SSDEEP
768:Eq+s3pUtDILNCCa+DiP9jkDtBLVvOqrijryYbjgeJ9MgxvEgK/JDZVc6KN:Eq+AGtQOljkjLn2rRb8IrxnkJDZVclN
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
1.0.7
Botnet
12-12 Dios
C2
cocomelondc.duckdns.org:9000
Mutex
DcRatMutex_qwqdanchun
Attributes
-
delay
1
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Async RAT payload 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ppxxpduwoj.exe"C:\Users\Admin\AppData\Local\Temp\ppxxpduwoj.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
72KB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
10.8MB
-
Filesize
64KB