Analysis
- max time kernel
140s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240412-en - resource tags
- submitted
19/04/2024, 16:46
General
- Target 7e0d6bfa958615b4d8e01cb93f91153db25cc17dd69fa6d874f75fba7b4bbf00.exe
- Size 48KB
- Sample240419-vacevsae3v
- SHA256 7e0d6bfa958615b4d8e01cb93f91153db25cc17dd69fa6d874f75fba7b4bbf00
Score
10/10
Malware Config
Extracted
Family
-
asyncrat
Version
-
1.0.7
Botnet
-
Default
C2
-
nagerproxysinintercavi8464perringuta.duckdns.org:1089
Mutex
-
DcRatMutex_qwqdanchun
Attributes
-
delay
1
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
- AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
Processes
-
C:\Users\Admin\AppData\Local\Temp\7e0d6bfa958615b4d8e01cb93f91153db25cc17dd69fa6d874f75fba7b4bbf00.exe"C:\Users\Admin\AppData\Local\Temp\7e0d6bfa958615b4d8e01cb93f91153db25cc17dd69fa6d874f75fba7b4bbf00.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1004-0-0x00000000002D0000-0x00000000002E2000-memory.dmp
memory/1004-1-0x00007FFB274C0000-0x00007FFB27F81000-memory.dmp
memory/1004-2-0x000000001AF90000-0x000000001AFA0000-memory.dmp
memory/1004-3-0x00007FFB274C0000-0x00007FFB27F81000-memory.dmp
memory/1004-4-0x000000001AF90000-0x000000001AFA0000-memory.dmp