Analysis

  • max time kernel
    0s
  • max time network
    0s
  • platform
    windows7_x64
  • resource
    win7-20241023-en
  • resource tags

    arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
  • submitted
    08/11/2024, 21:22

General

  • Target

    DAnegds_LetThereBeCarnage.exe

  • Size

    176KB

  • MD5

    9be0ce1fee8d843a42b1dcb1ae8a3eaa

  • SHA1

    8ba99f4d945c297a78c11eaebf3e25a13155192e

  • SHA256

    88b40bff36c532652d1c4da16fafe23d4dd0460618c54a489a6418281dbb0646

  • SHA512

    b2d362eceaf9dedf3296cc2582c5442414925490a36c51dc277d8c14a9a9cc10578dd88f74dd1afcc79da2377b6bc75a20c21c08491dc22f16f03546643863c3

  • SSDEEP

    3072:GlTFUnEvu9PnL/MvAFtOwQ9bwVjfyqyq5Q8hSbJX2UlD1fz6:SEUAFtOwQ9b0jfyqyqi8hSbJXZ1m

Score
10/10

Malware Config

Signatures

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

  • Asyncrat family

Processes

  • C:\Users\Admin\AppData\Local\Temp\DAnegds_LetThereBeCarnage.exe
    "C:\Users\Admin\AppData\Local\Temp\DAnegds_LetThereBeCarnage.exe"
    1⤵
      PID:2076

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2076-0-0x000007FEF5D03000-0x000007FEF5D04000-memory.dmp

      Filesize

      4KB

    • memory/2076-1-0x000000013F260000-0x000000013F290000-memory.dmp

      Filesize

      192KB

    • memory/2076-2-0x000007FEF5D00000-0x000007FEF66EC000-memory.dmp

      Filesize

      9.9MB