Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
20-08-2024 10:11
General
-
Target
9bed44cbd66a6ac9ba58bd121cc31120N.exe
-
Size
405KB
-
MD5
9bed44cbd66a6ac9ba58bd121cc31120
-
SHA1
ec7479fcf0b9574bbcd155cba27bcd3b73d2a80d
-
SHA256
488e8ae508c7fab6587ec3e5640e9edb61c397667dc5e799322bb76d8ffc3a02
-
SHA512
f639c53e6b24f7afb0a24172f4ea7f5a453d5d123ea35340533ad3476efb8cb7b510cf22eb75bb47f06e830b0fa9250ee10df7cab93a4f37bd676b1ada3678b8
-
SSDEEP
6144:0NYPj2jBoO33tq6qbXaYBc1g5aN9KBBBBBBByygHG/bZ+YdNpmIU:eYPAq81g5aN+BVKD
Score
10/10
Malware Config
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Modifies registry class 9 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9bed44cbd66a6ac9ba58bd121cc31120N.exe"C:\Users\Admin\AppData\Local\Temp\9bed44cbd66a6ac9ba58bd121cc31120N.exe"1⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
432KB
-
Filesize
9.9MB
-
Filesize
4KB
-
Filesize
9.9MB