Analysis
-
max time kernel
145s -
max time network
122s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20250113-en -
resource tags
-
submitted
13-01-2025 17:13
General
-
Target
122222.exe
-
Size
45KB
-
MD5
d3038fbf9fe4248d58c42c37a740b0b7
-
SHA1
8d7b6de0eb24cfa8c431c8204db92c0572a5d99c
-
SHA256
a3f1e03a2e47fbd4aec7e2079f1252322e537f5f4ea4a9991a619a8c04cc2f00
-
SHA512
5fe7a003fa3c4c3d5ab41ab43a235332281892dc5f32b77413eb07141d6fd47c29d12351d140db71154f10bcb27f5bdf554cd5b2c28f00a93f6cf31ea100f422
-
SSDEEP
768:Pu/CZTgoiziWUUM9rmo2qrZCXOmtSPIBzjbJgX3itgcdoIXuGSRBDZrx:Pu/CZTgle2QXsB3bGXStgioIXgdrx
Malware Config
Extracted
asyncrat
0.5.7B
Default
127.0.0.1:6606
127.0.0.1:7707
127.0.0.1:8808
127.0.0.1:4444
127.0.0.1:59858
127.0.0.1:60119
AsyncMutex_6SI8OkPnk
-
delay
3
-
install
false
-
install_folder
%AppData%
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Asyncrat family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\122222.exe"C:\Users\Admin\AppData\Local\Temp\122222.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
72KB
-
Filesize
7.7MB
-
Filesize
4KB
-
Filesize
7.7MB