Analysis
-
max time kernel
134s -
max time network
144s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
16-12-2024 05:18
General
-
Target
Client.exe
-
Size
47KB
-
MD5
d3ed1c2da2065809f44ef00d759e125e
-
SHA1
21600d2f5475563e79b52004daa4fe77f4c6cf4b
-
SHA256
bdef6f54af01f98f107e189fb07b2159177d25bd80077b87b5f83f18959b7e42
-
SHA512
e7809edc41ee0c3e4e00bb9370b37e3f431bec715563f94f0fb9a702e93b71876089016d9a075a8fb4fcebbe0493c9b6565a18b7e8e55a748cdb9e8a53bcc51a
-
SSDEEP
768:Yu/dRTUo0HQbWUnmjSmo2qM+L6Tw3gPIjUKB0bebYiYUlCpkOEvr0qv33tg8BDZl:Yu/dRTUPE2xw1jUKWbeZRlCpi4e332af
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
0.5.8
Botnet
Default
C2
192.168.0.14:4343
Mutex
a1OON3Evw1pM
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Asyncrat family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Client.exe"C:\Users\Admin\AppData\Local\Temp\Client.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
72KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB