Analysis
-
max time kernel
134s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
13-10-2024 17:19
General
-
Target
Client.exe
-
Size
47KB
-
MD5
89125efa59c9cc2a4bab24eeec41e3d7
-
SHA1
4b39c612a341bfa50c2d241a51b63d5ed002c5e1
-
SHA256
5fa767a69840e295173422d26f5c21fd84c5f5ec0bc8822a5f6e28c01abd2cf1
-
SHA512
4a0da453ce1b3223277b063876f5ed9be3bba3688e1acde76ad4a9935b8178421b7daac93cdae1bdb5b452924ac5b9339455b6329c22ab4fd2d2bb08364706f0
-
SSDEEP
768:RaIO5VILWCyh+DiWtelDSN+iV08Ybygeh0Avw/W+4vEgK/J/ZVc6KN:RaPNWtKDs4zb1o4/j4nkJ/ZVclN
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
1.0.7
Botnet
Default
C2
192.168.2.44:8848
Mutex
DcRatMutex_qwqdanchun
Attributes
-
delay
1
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Client.exe"C:\Users\Admin\AppData\Local\Temp\Client.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
72KB
-
Filesize
9.9MB
-
Filesize
4KB
-
Filesize
9.9MB