Analysis
-
max time kernel
134s -
max time network
137s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
08/10/2024, 15:36 UTC
General
-
Target
Stub/Stub.exe
-
Size
60KB
-
MD5
fd7b1162b84b0add4146e3bc0d13b7dd
-
SHA1
1fb46807f499267832aa444e12c403df880855bb
-
SHA256
972c912943000017fe92e563d4b7a5147f15825718edcb17307af79f85ac5f10
-
SHA512
6f5ff1aff1c899f9ae48cd177fd1bb277b2b9a7395858de1077392c293a4c68307d55d84a7c9968342da5a1296e720b00d8cd6f42b5faa11b7c643260eac300d
-
SSDEEP
768:NRgZXw8fNxs48AZYfEq586BHPcxLwM5QXWaRcW1Uo4blGNjj6MpqKYhY7:NR7586vcx35QXWaRB1UqiMpqKmY7
Score
10/10
Malware Config
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Stub\Stub.exe"C:\Users\Admin\AppData\Local\Temp\Stub\Stub.exe"1⤵
Network
-
DNS147.190.18.2.in-addr.arpaRemote address:8.8.8.8:53Request147.190.18.2.in-addr.arpaIN PTRResponse147.190.18.2.in-addr.arpaIN PTRa2-18-190-147deploystaticakamaitechnologiescom -
DNS48.229.111.52.in-addr.arpaRemote address:8.8.8.8:53Request48.229.111.52.in-addr.arpaIN PTRResponse
-
DNS195.201.50.20.in-addr.arpaRemote address:8.8.8.8:53Request195.201.50.20.in-addr.arpaIN PTRResponse
-
DNS83.210.23.2.in-addr.arpaRemote address:8.8.8.8:53Request83.210.23.2.in-addr.arpaIN PTRResponse83.210.23.2.in-addr.arpaIN PTRa2-23-210-83deploystaticakamaitechnologiescom
-
52.111.243.31:443
-
8.8.8.8:53147.190.18.2.in-addr.arpadns
DNS Request
147.190.18.2.in-addr.arpa
-
8.8.8.8:5348.229.111.52.in-addr.arpadns
DNS Request
48.229.111.52.in-addr.arpa
-
8.8.8.8:53195.201.50.20.in-addr.arpadns
DNS Request
195.201.50.20.in-addr.arpa
-
8.8.8.8:5383.210.23.2.in-addr.arpadns
DNS Request
83.210.23.2.in-addr.arpa
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
80KB