Analysis
-
max time kernel
149s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
24-10-2024 00:29
General
-
Target
2024-10-24_322d5ac420917f3aa13bbcad3c06bb51_asyncrat_hiddentear.exe
-
Size
172KB
-
MD5
322d5ac420917f3aa13bbcad3c06bb51
-
SHA1
15f810c9cd51c4f1b9435a9ff4d5c348312c0e4f
-
SHA256
fb914b25a1e68ba72e86c2166da37950fec52c3ee62c2f1a588678d0f09a845f
-
SHA512
d9756415ea66fc3c71b7be2b95cd654db3ce04153214db397b704526165f5414660ebce32bfa9bfa7a5435020b79311c5e2a7b4c4fca9f2b0ac4703af7a00f77
-
SSDEEP
3072:UUxcx4GfSPMV71AH1bbeQ9M+lmsolAIrRuw+mqv9j1MWLQ2sY:U5fSPMVKVb6V+lDAAc
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Botnet
Default
C2
127.0.0.1:4449
Mutex
venvmvvrojnviasqom
Attributes
-
delay
1
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Suspicious behavior: EnumeratesProcesses 37 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-10-24_322d5ac420917f3aa13bbcad3c06bb51_asyncrat_hiddentear.exe"C:\Users\Admin\AppData\Local\Temp\2024-10-24_322d5ac420917f3aa13bbcad3c06bb51_asyncrat_hiddentear.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
192KB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
4KB
-
Filesize
9.9MB
-
Filesize
9.9MB