Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
-
submitted
19/01/2025, 12:35
General
-
Target
0f13ce4c781626d0bb08b8285c53c98f06b26ffceefe25d6dc2eb0071c82a7e9.exe
-
Size
45KB
-
MD5
e34cb6442526e3e4828792ae020c64ab
-
SHA1
4fd2e722ab3d4a5e9e27a21b8315a88692af2d24
-
SHA256
0f13ce4c781626d0bb08b8285c53c98f06b26ffceefe25d6dc2eb0071c82a7e9
-
SHA512
5d8bae68c799b737389da2a71b2fb34e0edfd942b884f2b13c36fa584cca66d09bb0e0494899d09be2132c86c816407a86c9487ac8a72c2a3120076a1b2c28d2
-
SSDEEP
768:WuaoDTQgnX/WUTxAvmo2qvLbYZJC3gbbb4n9jbdPIm1ojbvgX3ijwwRkl+9sI3V5:WuaoDTQ8W2sYG79jmm1AbYXS8wRkl+iw
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
AsyncRAT
Botnet
Opal
C2
opal.wtf:8443
Mutex
ke5sh27H7HBf
Attributes
-
delay
1
-
install
false
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Asyncrat family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0f13ce4c781626d0bb08b8285c53c98f06b26ffceefe25d6dc2eb0071c82a7e9.exe"C:\Users\Admin\AppData\Local\Temp\0f13ce4c781626d0bb08b8285c53c98f06b26ffceefe25d6dc2eb0071c82a7e9.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
72KB
-
Filesize
6.9MB
-
Filesize
6.9MB