Analysis
-
max time kernel
141s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
29-07-2024 16:54
General
-
Target
53d053a8d77eccb79be5310785061fb4_JaffaCakes118.exe
-
Size
78KB
-
MD5
53d053a8d77eccb79be5310785061fb4
-
SHA1
2847cc23b80329a03b8abebb7ef8ffa9d19343b6
-
SHA256
6ebda126ec5c9eacb056d479a9362a179b851c20045b0820745e9bbe168cc364
-
SHA512
8c1cfb9be044608cf1fbb88db108ec644ab58e763f93813e64b5930b33ffc7b636086ed14f99ef26dc46312fdf715fb4ac9f3dd7a2ec6c5fd2e5302bbe23157b
-
SSDEEP
1536:WLLKmqKbERcG91gYj4exbccBgZHvWVsVQysXZ0wYaWD1eSwogB5zOG:c4Kb2rgYjMAVNyiTA1eRogBBOG
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
0.5.7B
Botnet
Default
C2
192.168.1.109:6606
192.168.1.109:7707
192.168.1.109:222
Mutex
AsyncMutex_6SI8OkPnk
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Async RAT payload 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\53d053a8d77eccb79be5310785061fb4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\53d053a8d77eccb79be5310785061fb4_JaffaCakes118.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
104KB
-
Filesize
8KB
-
Filesize
72KB
-
Filesize
10.8MB
-
Filesize
8KB
-
Filesize
10.8MB