Analysis
-
max time kernel
146s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
12-02-2024 10:18
General
-
Target
96ead51e14ce080056698f0c1ce9476d.exe
-
Size
45KB
-
MD5
96ead51e14ce080056698f0c1ce9476d
-
SHA1
e1cb85ce4acae82bec54ec616f2abe1b9a6cf818
-
SHA256
3c44d4db74f58f2656f0522793c8ae162c5b3f520db1188f7078ace0904dfeed
-
SHA512
1ad2037680ff511ed18d6b82bf05372cbbe5da8a18242f4fda8caec01870dbd490329c703a9ac6f97b4e46e642349c8622ac30720b42a4a299068afe2374aa6c
-
SSDEEP
768:Hu/CZTgoiziWUUM9rmo2qrrKjGKG6PIyzjbFgX3id3cJuJxvg8rSbakBDZjx:Hu/CZTgle2mKYDy3bCXSd3cQJeWSb/dd
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
0.5.7B
Botnet
Default
C2
127.0.0.1:6606
127.0.0.1:7707
127.0.0.1:8808
127.0.0.1:6821
Mutex
AsyncMutex_6SI8OkPnk
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
Processes
-
C:\Users\Admin\AppData\Local\Temp\96ead51e14ce080056698f0c1ce9476d.exe"C:\Users\Admin\AppData\Local\Temp\96ead51e14ce080056698f0c1ce9476d.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
72KB
-
Filesize
7.7MB
-
Filesize
64KB
-
Filesize
7.7MB