Overview

overview

10

Static

static

10

9788c4d8a3...2e.exe

windows7-x64

10

9788c4d8a3...2e.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    93s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18-11-2024 13:00

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    9788c4d8a3a54645423f5b5fca51dfe3274bdd2383a68ed0834a5e3f3232b72e.exe

  • Size

    53KB

  • MD5

    603c1ecf8d92f6f21e37ccd62520458b

  • SHA1

    5ae5133d4875542ee4c3061002e663f8edfd4297

  • SHA256

    9788c4d8a3a54645423f5b5fca51dfe3274bdd2383a68ed0834a5e3f3232b72e

  • SHA512

    1d8526c350d32930ff64a3d126b6ccdee0f72ad82183ef81cf24c99e7972299c272642376586762ade9004e566595cfc79771f462fcaea68d0ea36b12c68c9bc

  • SSDEEP

    768:T6JmQiGybcILcGIl+jivKfuwnbA8i0K8YbEgeaMxvsD6ILcvEgK/J4wVc6KNz:T6igF+nbArzbLVMxkdAnkJ4wVclNz

Score
10/10
asyncratwindowssecrat

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

WindowsSEC

C2

AnonKrnl-47127.portmap.io:47127

Mutex

asfqwGDsgWEthQWEhdfhGewhSDF

Attributes
  • delay

    3

  • install

    true

  • install_file

    Windows Security Systray.exe

  • install_folder

    %AppData%

aes.plain

Signatures

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat
  • Asyncrat family
    asyncrat

Processes

  • C:\Users\Admin\AppData\Local\Temp\9788c4d8a3a54645423f5b5fca51dfe3274bdd2383a68ed0834a5e3f3232b72e.exe
    "C:\Users\Admin\AppData\Local\Temp\9788c4d8a3a54645423f5b5fca51dfe3274bdd2383a68ed0834a5e3f3232b72e.exe"
    1⤵
      PID:560

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/560-0-0x00007FFD9C523000-0x00007FFD9C525000-memory.dmp

      Filesize

      8KB

      Download

    • memory/560-1-0x00000000003D0000-0x00000000003E4000-memory.dmp

      Filesize

      80KB

      Download

    • memory/560-2-0x00007FFD9C520000-0x00007FFD9CFE1000-memory.dmp

      Filesize

      10.8MB

      Download

    • memory/560-3-0x00007FFD9C520000-0x00007FFD9CFE1000-memory.dmp

      Filesize

      10.8MB

      Download