Resubmissions
17-11-2024 14:01
241117-rb2vcs1jdy 10General
-
Target
https://pixeldrain.com/u/Sk8iNegL
-
Sample
241117-rb2vcs1jdy
Score
10/10
Malware Config
Targets
-
-
Target
https://pixeldrain.com/u/Sk8iNegL
Score10/10-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Asyncrat family
-
StormKitty
StormKitty is an open source info stealer written in C#.
-
StormKitty payload
-
Stormkitty family
-
Async RAT payload
-
Downloads MZ/PE file
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-