Analysis
-
max time kernel
147s -
max time network
151s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
03-11-2024 07:07
General
-
Target
build3.exe
-
Size
45KB
-
MD5
4e96fd6e7499cf446fe6fa020738c2ba
-
SHA1
01fef96e72709860fb6f6eaacc5c52f06c6eaf83
-
SHA256
4473a5c03b4737ab12ca38948cf38d8a13da5a4e8af094227034c1e701e212fa
-
SHA512
8da11b39d99767fee93009e20be4b19b3937bb2f8b1a75d6dbf399271dd7c4e682edf06025038fd0a57a11adbca445d09f0abda09c1aef77b22cd6b32a68b34c
-
SSDEEP
768:KuPXZTg4pYiWUU9jjmo2qrTCHyTtUPIBzjb3gX3iukjMMd8OYubBDZSx:KuPXZTgKa2mnjB3bQXSukjXd8kdSx
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
0.5.8
Botnet
Default
C2
127.0.0.1:6606
127.0.0.1:7707
127.0.0.1:8808
127.0.0.1:139
Mutex
8Lyp08vgvo79
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Asyncrat family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\build3.exe"C:\Users\Admin\AppData\Local\Temp\build3.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
72KB
-
Filesize
7.7MB
-
Filesize
4KB
-
Filesize
7.7MB