Analysis
-
max time kernel
121s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
20-11-2024 13:03
General
-
Target
file.exe
-
Size
187KB
-
MD5
0b963852688f37c062548d7ccf610b07
-
SHA1
698aefe85ccc31f42215ca1df14faf02bb36f17e
-
SHA256
224e4c17a089090cca9119d71fb2334fb15acf48bc92ea3e932c90c5ff3e769d
-
SHA512
8c8c833ecccb0c3d010899c7e7f934d41b592888f29c34d94955bb7db5956d513fb38126aa1dce7e41e65cf84efd91a8e023c7f26e3445d98eb40b4ca8773528
-
SSDEEP
3072:o0WJGrmn/HDUOvme0a3dTp9bhHRR0QJ8cNh/z7Aij9K:2z/HDexaRp9btRR02xgij
Malware Config
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Asyncrat family
-
Async RAT payload 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
4KB
-
Filesize
208KB
-
Filesize
200KB
-
Filesize
9.9MB
-
Filesize
4KB
-
Filesize
9.9MB