Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
16-10-2024 17:07
General
-
Target
NuclearRat.exe.1.8.exe
-
Size
76KB
-
MD5
eec7a5928ec96c9f2733d328aa3d30fc
-
SHA1
4f9d8ace1f5407ee6c5ba4e2947b53a12cb0721a
-
SHA256
a1155e2b51e2f8baeed2992b17329108cddc45faf19ac0024cd5efd002f030ad
-
SHA512
25e340a57913f01474919d0cff6b0785cc53614ec9e215f99505e6347fa0060ed8f40337233bf9e2b1f28cf26c43813d3e1e4aa08f222df9294552a7aac23275
-
SSDEEP
1536:0OtmnlcQzbjt0zkAnkJYuNWjK4a2h6HLdzZWOGM41JMZVclN:ZtmnSQzbjt0w0bjsdMOGjMzY
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
1.0.7
Botnet
Default
C2
127.0.0.1:8848
Mutex
DcRatMutex_qwqdanchun
Attributes
-
delay
1
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
Processes
-
C:\Users\Admin\AppData\Local\Temp\NuclearRat.exe.1.8.exe"C:\Users\Admin\AppData\Local\Temp\NuclearRat.exe.1.8.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
96KB
-
Filesize
8KB
-
Filesize
10.8MB
-
Filesize
8KB
-
Filesize
10.8MB