Analysis
-
max time kernel
150s -
max time network
155s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
22-05-2024 03:41
General
-
Target
Client.exe
-
Size
47KB
-
MD5
c69f098974248c79def70daf8b16bb8b
-
SHA1
793c9cd72b635d731686db373b5136ff63cabc0a
-
SHA256
93a0782c15f0c0049c85a07d09742805398aa6491b0b5a31d25603dc233c8f7d
-
SHA512
d4d29f682cd42a3b494563929ae33356a386f2e9383010fdac8e95ce4c3e77100979d9040faeeb419eaecd82cee66a0521f2d50ee140ac7e0d7b25e77e2ae945
-
SSDEEP
768:dOEuILWCKi+DiBtelDSN+iV08Ybygea+2hOdyi//vEgK/J9lZVc6KN:dOtmBtKDs4zb1r0dyi//nkJ3ZVclN
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
1.0.7
Botnet
Default
C2
103.179.189.111:8848
Mutex
DcRatMutex_qwqdanchun
Attributes
-
delay
1
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Client.exe"C:\Users\Admin\AppData\Local\Temp\Client.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
72KB
-
Filesize
9.9MB
-
Filesize
4KB
-
Filesize
9.9MB