Analysis
- max time kernel
137s - max time network
147s - platform
windows7_x64 - resource
win7-20240705-en - resource tags
- submitted
23/07/2024, 03:15
General
- Target ae37daf1ed803957ad1c9775be7796e8a5eeed47ec840c479aaf14b4906aa4f2.exe
- Size 59KB
- Sample240723-dr75esvble
- SHA256 ae37daf1ed803957ad1c9775be7796e8a5eeed47ec840c479aaf14b4906aa4f2
Score
10/10
Malware Config
Extracted
Family
-
asyncrat
Version
-
0.5.7B
C2
-
xsesx.duckdns.org:6161
Mutex
-
AsyncMutex_6SI8OkPnk
Attributes
-
delay
6
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
- AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ae37daf1ed803957ad1c9775be7796e8a5eeed47ec840c479aaf14b4906aa4f2.exe"C:\Users\Admin\AppData\Local\Temp\ae37daf1ed803957ad1c9775be7796e8a5eeed47ec840c479aaf14b4906aa4f2.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2688-0-0x0000000074E4E000-0x0000000074E4F000-memory.dmp
memory/2688-1-0x0000000001250000-0x0000000001264000-memory.dmp
memory/2688-2-0x0000000074E40000-0x000000007552E000-memory.dmp
memory/2688-3-0x0000000074E4E000-0x0000000074E4F000-memory.dmp
memory/2688-4-0x0000000074E40000-0x000000007552E000-memory.dmp