Analysis
-
max time kernel
119s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
03-08-2024 11:55
General
-
Target
93bedc0050cd6919f8168dff670e25f0N.exe
-
Size
45KB
-
MD5
93bedc0050cd6919f8168dff670e25f0
-
SHA1
77097340335145310b2a62a44868ffc81d2cacbc
-
SHA256
f1fdf77eea60fa3e943f16ffc4201d78e848fb9c6c5258a5c7e101c9d4480e63
-
SHA512
24d873ef05946106de048aa21f0c40cb866100b682d1393c95534ddf108512504206e260f980c52c362d445a16aaeaceeb51ec5ce6205341879e0228eaedf781
-
SSDEEP
768:uu/dRTUo0HQbWUnmjSmo2qMkiaLMwJAOPIcAzjbpgXYi4hc2pMCarUDAZ/BDZax:uu/dRTUPE245n23cA3bmX1IZpzWUDMdY
Malware Config
Extracted
asyncrat
0.5.8
Default
127.0.0.1:6606
127.0.0.1:7707
127.0.0.1:8808
wrxgvxKm8JZK
-
delay
3
-
install
false
-
install_folder
%AppData%
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\93bedc0050cd6919f8168dff670e25f0N.exe"C:\Users\Admin\AppData\Local\Temp\93bedc0050cd6919f8168dff670e25f0N.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
72KB
-
Filesize
6.9MB
-
Filesize
6.9MB