Overview

overview

10

Static

static

10

3369432d1d...44.exe

windows7-x64

10

3369432d1d...44.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    75s
  • max time network
    20s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    29-12-2024 11:31

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3369432d1d4735175c7c25029ab3bd1d9cf3293f0bb48790d77a10cc751af744.exe

  • Size

    118KB

  • MD5

    a14629429a2c1e14533a9cc23f14a50c

  • SHA1

    09b8a4ac7d2ab98e38db5b1bf775fefe204db110

  • SHA256

    3369432d1d4735175c7c25029ab3bd1d9cf3293f0bb48790d77a10cc751af744

  • SHA512

    8c2dee2cd05fea22d081f14710d4aa4333e1f87c7897b9ac88b16d05a834ca1a7bad636f0e0b39e06fd5e70e90002c347554e309cbbca2d5ebed13843e2e0f08

  • SSDEEP

    1536:a4++NaNYbH+XekIutnkJQ4GZjzQwK5WW7VCn6Ky7FAmu3wtBUniymeq07sZPSTlL:N++ANYbH+DIqLe5BV0WUniyimy9rY

Score
10/10
asyncratspreadrat

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

Spread

C2

5.tcp.eu.ngrok.io:14113

Mutex

jrnwjkrntpiufsejnt

Attributes
  • delay

    1

  • install

    true

  • install_file

    MsEdge.exe

  • install_folder

    %Temp%

aes.plain

Signatures

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat
  • Asyncrat family
    asyncrat

Processes

  • C:\Users\Admin\AppData\Local\Temp\3369432d1d4735175c7c25029ab3bd1d9cf3293f0bb48790d77a10cc751af744.exe
    "C:\Users\Admin\AppData\Local\Temp\3369432d1d4735175c7c25029ab3bd1d9cf3293f0bb48790d77a10cc751af744.exe"
    1⤵
      PID:2116

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2116-0-0x000007FEF5A63000-0x000007FEF5A64000-memory.dmp

      Filesize

      4KB

      Download

    • memory/2116-1-0x0000000000340000-0x0000000000364000-memory.dmp

      Filesize

      144KB

      Download

    • memory/2116-2-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

      Filesize

      9.9MB

      Download

    • memory/2116-3-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

      Filesize

      9.9MB

      Download