Analysis
-
max time kernel
96s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
08-08-2024 10:17
General
-
Target
f34dfc391fc22c31eefb6b5d22d4446e9dd31eb6709350fe208e8c19150ea808.exe
-
Size
156KB
-
MD5
933c04711da8275b280a066d769a1203
-
SHA1
0ce6860c849d5206d80524bcc5b0170cfd76d2e9
-
SHA256
f34dfc391fc22c31eefb6b5d22d4446e9dd31eb6709350fe208e8c19150ea808
-
SHA512
678294a4ad2f921f1e164972c8691c26c4cb624bd9c6d13a3596513f4de9a38a0696dcd22fe554102dfb94e6796040f2b37be6b5a9cfbc123bc4c74d140eafa6
-
SSDEEP
3072:4/NpST+6bbDKIpCjLZTyZr+ICGLZTyZr+ICbQ:kpST/bcpTyzNTyz
Score
10/10
Malware Config
Extracted
Family
asyncrat
C2
43.154.203.129:8848
Attributes
-
delay
1
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f34dfc391fc22c31eefb6b5d22d4446e9dd31eb6709350fe208e8c19150ea808.exe"C:\Users\Admin\AppData\Local\Temp\f34dfc391fc22c31eefb6b5d22d4446e9dd31eb6709350fe208e8c19150ea808.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
176KB
-
Filesize
8KB
-
Filesize
10.8MB
-
Filesize
8KB
-
Filesize
10.8MB