Analysis
-
max time kernel
116s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
22-07-2024 07:18
General
-
Target
7a72c20b4b27005813fbff91bf084800N.exe
-
Size
47KB
-
MD5
7a72c20b4b27005813fbff91bf084800
-
SHA1
6a6f89b20e2a8d0dec4643264bf391c93c49b4c2
-
SHA256
5ce6add68e1e373c4ad4d8b5e3a1b13da3fdca5904cee09f2fcb0171eb200766
-
SHA512
68a1b418354f4531081e34ab77d15064d5eb2f74ecbacd2b074d5dd91f59ba9db16c6c28b7fa83ae45c5c57270bc4d5e8d48eb255471c10f0782b51007833469
-
SSDEEP
768:4q+s3pUtDILNCCa+DiptelDSN+iV08YbygeClABvEgK/JvZVc6KN:4q+AGtQOptKDs4zb1HlABnkJvZVclN
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
1.0.7
Botnet
Default
C2
thequest.dns.army:7979
Mutex
DcRatMutex_qwqdanchun
Attributes
-
delay
1
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
Processes
-
C:\Users\Admin\AppData\Local\Temp\7a72c20b4b27005813fbff91bf084800N.exe"C:\Users\Admin\AppData\Local\Temp\7a72c20b4b27005813fbff91bf084800N.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
72KB
-
Filesize
10.8MB
-
Filesize
8KB
-
Filesize
10.8MB