Analysis
-
max time kernel
140s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
01/12/2024, 20:13
General
-
Target
1e41c562b788ef32217eb4365d9e65fd140175461f4dbba601d386453243ddd4.exe
-
Size
72KB
-
MD5
559f4a9afc2aca08082cc7285796eb7a
-
SHA1
24f41f73493c32d1d80962c6d1ac67a8f1609a2d
-
SHA256
1e41c562b788ef32217eb4365d9e65fd140175461f4dbba601d386453243ddd4
-
SHA512
876da3fbb3a5a2c9bb3565b82c195b4fe028b72d699722d54b042d84f790fb8d8a64f516a9384d7aa605f6dc5ab30de3aab24c46f1ad4d7bbf34e41716d77887
-
SSDEEP
768:3AwxooFU8kz6CfN1ea701vY2MY4iXigKcpZBRrw0BwWWZVc6KN44Vy:3Awkz84yZ1NZ7TwWWZVclN4Wy
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
XieBroRAT-1.7
Botnet
Default
C2
127.0.0.1:8880
8079048a.e2.luyouxia.net:8880
Mutex
gorousdwoqxqqq
Attributes
-
delay
1
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Asyncrat family
Processes
-
C:\Users\Admin\AppData\Local\Temp\1e41c562b788ef32217eb4365d9e65fd140175461f4dbba601d386453243ddd4.exe"C:\Users\Admin\AppData\Local\Temp\1e41c562b788ef32217eb4365d9e65fd140175461f4dbba601d386453243ddd4.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
72KB
-
Filesize
10.8MB
-
Filesize
8KB
-
Filesize
10.8MB