Analysis
-
max time kernel
1690s -
max time network
1700s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
29-06-2024 00:44
General
-
Target
client.exe
-
Size
139KB
-
MD5
60b39085c266f364c6b1269ab8fe79f5
-
SHA1
2ddc84df80f3404875706ee00fa43f5ffaf922f2
-
SHA256
ad45703ebdfd43596469416bc9e24374d77a6f361057a31b6cc659789522da75
-
SHA512
f3d36ed6003a6cffceed0e48426ff438d427a38711b25313778541cd528f05f4e6ab521fcfde84914b22f71de7325c53976fdb8fb8d56b21c782e521d050ccd9
-
SSDEEP
3072:NbR8P5sz7Bqh1v59Y08mAjs0Ltel+qOeJHlpV8b+Y/Yl:NbR8hI7BqjjYHdrqkL/
Score
10/10
Malware Config
Extracted
Family
arrowrat
Botnet
identifier
C2
IP:PORT
Mutex
mutex
Signatures
-
ArrowRat
Remote access tool with various capabilities first seen in late 2021.
Processes
-
C:\Users\Admin\AppData\Local\Temp\client.exe"C:\Users\Admin\AppData\Local\Temp\client.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
168KB
-
Filesize
8KB