Analysis
-
max time kernel
147s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
16/01/2025, 03:45
General
-
Target
fa32ea24d1a6041be009ad0c59ce61f3d00e0588700c709c0222ecd8c38c3753.exe
-
Size
47KB
-
MD5
9d37ca25dd671257d936c89cc2dc073b
-
SHA1
a2b931bb64e729d49fe682275f76cb3f1918b999
-
SHA256
fa32ea24d1a6041be009ad0c59ce61f3d00e0588700c709c0222ecd8c38c3753
-
SHA512
a60e9b75d88b960007fadb9b0e2292b7220666c6c236564c14836e6069123f2df47ee6e250d89ac663b9b47f69e45f9b45abb1c498538c57d300856c08e6c653
-
SSDEEP
768:4q+s3pUtDILNCCa+DiptelDSN+iV08Ybyge0jvN86zjWvEgK/JvZVc6KN:4q+AGtQOptKDs4zb15jOUjWnkJvZVclN
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
1.0.7
Botnet
NewsYears
C2
driveswindows.duckdns.org:8000
Mutex
DcRatMutex_qwqdanchun
Attributes
-
delay
1
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Asyncrat family
Processes
-
C:\Users\Admin\AppData\Local\Temp\fa32ea24d1a6041be009ad0c59ce61f3d00e0588700c709c0222ecd8c38c3753.exe"C:\Users\Admin\AppData\Local\Temp\fa32ea24d1a6041be009ad0c59ce61f3d00e0588700c709c0222ecd8c38c3753.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
72KB
-
Filesize
10.8MB
-
Filesize
8KB
-
Filesize
10.8MB