Analysis
-
max time kernel
149s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20-11-2024 13:03
General
-
Target
file.exe
-
Size
187KB
-
MD5
0b963852688f37c062548d7ccf610b07
-
SHA1
698aefe85ccc31f42215ca1df14faf02bb36f17e
-
SHA256
224e4c17a089090cca9119d71fb2334fb15acf48bc92ea3e932c90c5ff3e769d
-
SHA512
8c8c833ecccb0c3d010899c7e7f934d41b592888f29c34d94955bb7db5956d513fb38126aa1dce7e41e65cf84efd91a8e023c7f26e3445d98eb40b4ca8773528
-
SSDEEP
3072:o0WJGrmn/HDUOvme0a3dTp9bhHRR0QJ8cNh/z7Aij9K:2z/HDexaRp9btRR02xgij
Score
10/10
Malware Config
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Asyncrat family
-
Async RAT payload 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
208KB
-
Filesize
200KB
-
Filesize
10.8MB
-
Filesize
8KB
-
Filesize
10.8MB