Analysis
-
max time kernel
134s -
max time network
144s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
09-07-2024 03:03
General
-
Target
Stupido.exe
-
Size
47KB
-
MD5
28ea39d8afd092f7ac283d720c4ff07b
-
SHA1
74c3a8c13d8b5722be39a70e6fb91a4084ddab9f
-
SHA256
af9d60ae6848565e34f1f4545f75ad894b0cb502f73216487190d95ecb86f282
-
SHA512
a2329c29ed655e956beb6ed598134cd2058c46e611d112d1092fd1d603c146ab94215f33ae9f7502379d06c02a58b2ddc82577a18c175eb9bcc6404111a7a372
-
SSDEEP
768:NuPfZTg4pYiWUU9jjmo2qrZpaThJdgnLpQWYAofR0bWXN5H6jQhvUNVCy2bdcDZI:NuPfZTgKa29gLBYAo+bWdVXMB26dJf+
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
0.5.8
Botnet
Default
C2
card-buzz.gl.at.ply.gg:2497
Mutex
uE6w2BW3TJU0
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Stupido.exe"C:\Users\Admin\AppData\Local\Temp\Stupido.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
72KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB