Resubmissions
12/05/2025, 21:57
250512-1tzbmaxrw325/04/2025, 20:13
250425-yzes3asnt91025/04/2025, 14:50
250425-r7qf7syks31025/04/2025, 14:35
250425-ryf66svsby1025/04/2025, 14:30
250425-rvmjsaxrw51024/04/2025, 16:38
250424-t5sjws1rw61014/04/2025, 07:51
250414-jp1kfssjz91014/04/2025, 07:46
250414-jl9nyssjt91008/04/2025, 15:58
250408-tevasswl181008/04/2025, 14:19
250408-rm2nqsvqw210Analysis
- max time kernel
147s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20250314-en - resource tags
- submitted
25/04/2025, 14:35
General
- Target f5ed1274646abc95fd8b87f43adcadbc.exe
- Size 66KB
- Sample250425-ryf66svsby
- SHA256 dfc5e3435f8ce62c4ba623753f1e15d0311547b9c0276d34b4736f640be26330
Malware Config
Extracted
-
asyncrat
-
| nelsontriana980
-
Default
-
pctrabajonuevo.casacam.net:6606
-
AsyncMutex_6SI8OkPnk
-
delay
3
-
install
false
-
install_folder
%AppData%
Signatures
- AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
- Asyncrat family
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\f5ed1274646abc95fd8b87f43adcadbc.exe"C:\Users\Admin\AppData\Local\Temp\f5ed1274646abc95fd8b87f43adcadbc.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5416-0-0x0000000074B9E000-0x0000000074B9F000-memory.dmp
memory/5416-1-0x0000000000130000-0x0000000000146000-memory.dmp
memory/5416-2-0x0000000074B90000-0x0000000075340000-memory.dmp
memory/5416-3-0x0000000074B9E000-0x0000000074B9F000-memory.dmp
memory/5416-4-0x0000000074B90000-0x0000000075340000-memory.dmp