Analysis
-
max time kernel
2s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
16-10-2024 11:59
General
-
Target
Client.exe
-
Size
63KB
-
MD5
716b38c9fbde9442203eca525602e7de
-
SHA1
e167052fa2dfb97d1e988bc899071de86fb33e48
-
SHA256
1b991dbbc782deb4897bab58d5ba9de908843a9d735ab598d6341706cd2634d8
-
SHA512
b522b68c3f2fa0cb96f5df4c44602c799fdcdb4472a4bcec5b17d407525a2dc893af22030db684ff233c0ecced9fec7b8f2a786af13d77b69e8a26fa57d6e795
-
SSDEEP
768:N802C46poI3iPgqUiz9JmacXveeObMbNqV1+RSCv7mqb2nIpwH1oUc2BbhPG6Dph:3EIoRHeeiIVrGbbXwBB1G6DpqKmY7
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
5.0.5
Botnet
Roblox
C2
E123zggasdg-23385.portmap.host:23385
Mutex
Venom_RAT_HVNC_Mutex_Venom RAT_HVNC
Attributes
-
delay
1
-
install
true
-
install_file
WinSocket.exe
-
install_folder
%AppData%
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Suspicious use of AdjustPrivilegeToken 21 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Client.exe"C:\Users\Admin\AppData\Local\Temp\Client.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
88KB
-
Filesize
10.8MB
-
Filesize
10.8MB