Analysis
-
max time kernel
143s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
11-07-2024 12:35
General
-
Target
WaveInstaller.exe
-
Size
48KB
-
MD5
ffdbfa925cfd5b6a8de01878050d5c02
-
SHA1
3f44bd4133b98f94b3085050b951bcba3b7ff837
-
SHA256
3d2d4ea5e9f269ef05bdb96e6822f310278b96597eaef98aa65e1df140a4815e
-
SHA512
3ea2bdb9c835248b07c67a95ff1a466d63077d47edb9982c046f9f4f36bd1301ac5c3a3b472e96e6c01a17804bcd9a89886bf78d8a617961b60469b8485e900a
-
SSDEEP
768:qH1fhILbkJt+RiDaB2PiMZ8YbOgRoC5l5OvEgK/JAZVc6KN:qH1Nvxnzbxl4nkJAZVclN
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
1.0.7
Botnet
Default
C2
127.0.0.1:8848
https://ooo.fluffiflower.xyz/:8848
ooo.fluffiflower.xyz:8848
2.132.191.110:8848
0.0.0.0:8848
Mutex
DcRatMutex_qwqdanchun
Attributes
-
delay
1
-
install
false
-
install_file
Explorer.exe
-
install_folder
%AppData%
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
Processes
-
C:\Users\Admin\AppData\Local\Temp\WaveInstaller.exe"C:\Users\Admin\AppData\Local\Temp\WaveInstaller.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
72KB
-
Filesize
8KB
-
Filesize
10.8MB
-
Filesize
10.8MB