Analysis
- max time kernel
148s - max time network
147s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
02/08/2026, 15:19
General
- Target 9e1e76c4fdec7452284fba2b74db92f05ff9ad233e3f0da85cb6dca9e5af3e79.exe
- Size 2.0MB
- Sample260802-sp99bswape
- SHA256 9e1e76c4fdec7452284fba2b74db92f05ff9ad233e3f0da85cb6dca9e5af3e79
Malware Config
Extracted
-
asyncrat
-
LoaderPanel
-
Default
-
mhiaofhaifs.click:6565
-
mhiascjaoecj.click:6565
-
mhiaohcaffs.click:6565
-
ikerkpuzfdb
-
delay
1
-
install
false
-
install_folder
%AppData%
Signatures
- Family: AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
- Creates a file in the Startup directory 1 TTPs 1 IoCs
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
Processes
-
C:\Users\Admin\AppData\Local\Temp\9e1e76c4fdec7452284fba2b74db92f05ff9ad233e3f0da85cb6dca9e5af3e79.exe"C:\Users\Admin\AppData\Local\Temp\9e1e76c4fdec7452284fba2b74db92f05ff9ad233e3f0da85cb6dca9e5af3e79.exe"1⤵
- Creates a file in the Startup directory
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3184-0-0x0000025747B60000-0x0000025747D64000-memory.dmp
memory/3184-2-0x0000025749980000-0x000002574998A000-memory.dmp
memory/3184-1-0x00007FFE1914F000-0x00007FFE19150000-memory.dmp
memory/3184-3-0x00007FFE18FC0000-0x00007FFE19964000-memory.dmp
memory/3184-4-0x00007FFE18FC0000-0x00007FFE19964000-memory.dmp
memory/3184-5-0x00007FFE18FC0000-0x00007FFE19964000-memory.dmp
memory/3184-7-0x00007FFE18FC0000-0x00007FFE19964000-memory.dmp
memory/3184-6-0x00007FFE18FC0000-0x00007FFE19964000-memory.dmp
memory/3184-8-0x00007FFE18FC0000-0x00007FFE19964000-memory.dmp
memory/3184-9-0x00007FFE18FC0000-0x00007FFE19964000-memory.dmp
memory/3184-10-0x00007FFE18FC0000-0x00007FFE19964000-memory.dmp
memory/3184-11-0x00007FFE18FC0000-0x00007FFE19964000-memory.dmp
memory/3184-12-0x00007FFE18FC0000-0x00007FFE19964000-memory.dmp
memory/3184-13-0x00007FFE18FC0000-0x00007FFE19964000-memory.dmp
memory/3184-14-0x00007FFE18FC0000-0x00007FFE19964000-memory.dmp
memory/3184-15-0x00007FFE18FC0000-0x00007FFE19964000-memory.dmp
memory/3184-17-0x00007FFE18FC0000-0x00007FFE19964000-memory.dmp