Resubmissions
Analysis
-
max time kernel
134s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
24-05-2024 21:19
General
-
Target
Thrax_AIO.exe
-
Size
48KB
-
MD5
9586566b16a5bc442637132e6b1acf5f
-
SHA1
4e18d407aadea762f08eadc23d3860521b1b8d0e
-
SHA256
e96980a7e0277caa98b0fdf5a48d94e1d602a9b03ef7987b7cad6a7ea86b8eb3
-
SHA512
3d3a59a6f667ef203829a6e66358c80a3630f95ccc0f63d733d649d9afca13206abfc0e32677958784191a6ffc4fc657c0c1618ba1a97c6c4f7ac450aa8f253e
-
SSDEEP
768:uBUQgNIL4+M0+Li45i2+8YbYgeYgHqxvEgK/JjjVc6KN:uB1gjsbzbPMEnkJjjVclN
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
1.0.7
Botnet
Default
C2
127.0.0.1:8848
Mutex
DcRatMutex_qwqdanchun
Attributes
-
delay
1
-
install
true
-
install_file
Im Gay.exe
-
install_folder
%AppData%
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Thrax_AIO.exe"C:\Users\Admin\AppData\Local\Temp\Thrax_AIO.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
72KB
-
Filesize
10.8MB
-
Filesize
10.8MB