Analysis
-
max time kernel
148s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
05-12-2024 01:16
General
-
Target
a45f2013adadd1e3664d28885b014dd8bca38bd5219db05f6083a3665e18ccfc.exe
-
Size
886KB
-
MD5
37d3c4fb51f7ab9c67eec830ae6f9e1b
-
SHA1
7bff2668e39ebcff90f0230a78e343adf490c00b
-
SHA256
a45f2013adadd1e3664d28885b014dd8bca38bd5219db05f6083a3665e18ccfc
-
SHA512
6592785f7a24f3cf46bdb61d5338cc4fb5bb3e584a9366ee1e31dc3080f3fa262bf49a28c65c18dbb7a3efcb37ee0148ae8844b72f00a7b1c8ffa16d148b0726
-
SSDEEP
24576:G4KC5wLEzQydNW/pMQzDvdgquOJDjJm8fLOGx2WH8aHF:P1GVx3
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
| Edit 3LOSH RAT
Botnet
Default
C2
127.0.0.1:6606
127.0.0.1:7707
127.0.0.1:8808
Mutex
MSF
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Asyncrat family
-
Async RAT payload 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a45f2013adadd1e3664d28885b014dd8bca38bd5219db05f6083a3665e18ccfc.exe"C:\Users\Admin\AppData\Local\Temp\a45f2013adadd1e3664d28885b014dd8bca38bd5219db05f6083a3665e18ccfc.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
96KB
-
Filesize
4KB
-
Filesize
88KB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
4KB
-
Filesize
9.9MB
-
Filesize
9.9MB