Analysis
- max time kernel
148s - max time network
147s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
04/08/2026, 12:43
General
- Target 2026-08-03_271d812df61f231da392080d6d2c0184_.exe
- Size 2.9MB
- Sample260804-pybwcabb42
- SHA256 3a88847f4698c54c81238bcaa3bc95abe0c091d3b21b7c67a8d3aeac35ce5183
Score
10/10
Malware Config
Extracted
Family
-
asyncrat
Version
-
0.5.8
Botnet
-
Default
C2
-
20.102.109.86:44405
Mutex
-
cU37IQtwQlRp
Attributes
-
delay
3
-
install
true
-
install_file
main.exe
-
install_folder
%AppData%
aes.plain
Signatures
- Family: AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
- Async RAT payload 1 IoCs
- Detects file containing reversed ASEP Autorun registry keys 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_271d812df61f231da392080d6d2c0184_.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-03_271d812df61f231da392080d6d2c0184_.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2984-0-0x0000023B63A50000-0x0000023B63A62000-memory.dmp
memory/2984-1-0x00007FF8BD79F000-0x00007FF8BD7A0000-memory.dmp
memory/2984-2-0x00007FF8BD610000-0x00007FF8BDFB4000-memory.dmp
memory/2984-3-0x00007FF8BD610000-0x00007FF8BDFB4000-memory.dmp
memory/2984-4-0x00007FF8BD610000-0x00007FF8BDFB4000-memory.dmp