Analysis
-
max time kernel
95s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
07-12-2024 23:29
General
-
Target
b2db48700b98f317d7c51b0d2ff5ef8fe8b14f729ce5c40becaa430826dc26d5N.exe
-
Size
52KB
-
MD5
74ba004d79919d07087bd60ea2532a90
-
SHA1
9f4bd6c9f3412dd6c97472b799bb6c628621cbcd
-
SHA256
b2db48700b98f317d7c51b0d2ff5ef8fe8b14f729ce5c40becaa430826dc26d5
-
SHA512
8a7c4b2fcd433a34d7e8ebc482e668214a1abb541d943475fc2d175f4553ec500593ebe6ac2e77cead9441c50b40f032ae716c95221ab6cbc05262d3ced00393
-
SSDEEP
768:ZOEuILWCKi+DiBtelDSN+iV08YbygeWfK39vEgK/J9SzyzyVc6KN:ZOtmBtKDs4zb1XynkJ0z6yVclN
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
1.0.7
Botnet
Default
C2
10.177.224.229:8848
Mutex
DcRatMutex_qwqdanchun
Attributes
-
delay
1
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Asyncrat family
Processes
-
C:\Users\Admin\AppData\Local\Temp\b2db48700b98f317d7c51b0d2ff5ef8fe8b14f729ce5c40becaa430826dc26d5N.exe"C:\Users\Admin\AppData\Local\Temp\b2db48700b98f317d7c51b0d2ff5ef8fe8b14f729ce5c40becaa430826dc26d5N.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
80KB
-
Filesize
8KB
-
Filesize
10.8MB
-
Filesize
10.8MB