Analysis
-
max time kernel
148s -
max time network
154s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
29-07-2024 13:59
General
-
Target
file.exe
-
Size
45KB
-
MD5
4a57c8975eb00d56b4ed224281f700bd
-
SHA1
e146df04bcb7273233fa7ed435add65933ea84fd
-
SHA256
5dc26c504cc3b9c5bf1150e0b6a577ee75ca878f24a47269f72c933697049635
-
SHA512
8acedc33033d27dd7500f46e7c8dbe7f971c52682913d9efd493c48bf1f898f789db8c5b06f24309a48433cb4a2d22593954800ae836d879ef2b0196ba2a89e9
-
SSDEEP
768:Nu2/0TckJ26WUsFvgmo2q7MKjPGaG6PIyzjbFgX3ip9PyGYlpnG+eBDZOx:Nu2/0TceH2ZKTkDy3bCXSpWG+wdOx
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
0.5.8
Botnet
Default
C2
144.91.79.54:32769
Mutex
E9IiT5JzUivo
Attributes
-
delay
3
-
install
false
-
install_file
TestFile.exe
-
install_folder
%AppData%
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
72KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB