General
Static task
static1
URLScan task
urlscan1
Malware Config
Extracted
Family
asyncrat
Version
0.5.3
C2
127.0.0.1:6606
127.0.0.1:7707
127.0.0.1:8808
Mutex
tzkcqvgbzyqwzr
Attributes
-
delay
0
-
install
false
-
install_folder
%AppData%
aes.plain
Targets
-
-
Asyncrat family
-
Contains code to disable Windows Defender
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
-
Async RAT payload
-
Executes dropped EXE