Analysis
-
max time kernel
150s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
15-07-2024 16:14
General
-
Target
zvgfd-main/Output.exe
-
Size
47KB
-
MD5
dc8505be3e85a79e01c1ab4e019d9faf
-
SHA1
a4e16fc8cd02e1e25ad0222def3963c26f929654
-
SHA256
8fc144f1a30ed95661e07d477386a4f20e7f3412917512ea2e6797893ad46647
-
SHA512
bc2ac03ec186e36bba22bbb6224f7fa664ca39df67aa2a132304a0bd2613f72e3bee4e1d65b48024e61b4ae86a2973de0cb1a84339ca47a2ba4b39e13021b876
-
SSDEEP
768:AuPfZTg4pYiWUU9jjmo2qrLJj93DEsdjEn+WUFlVev0bsGExHCx6zLHijYQptDFQ:AuPfZTgKa2Sz3osdjEnBUFlVesbsGOSS
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
0.5.8
Botnet
Default
C2
version-brings.gl.at.ply.gg:58939
Mutex
udcw85wJfrM9
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\zvgfd-main\Output.exe"C:\Users\Admin\AppData\Local\Temp\zvgfd-main\Output.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
72KB
-
Filesize
7.7MB
-
Filesize
4KB
-
Filesize
7.7MB