Analysis
- max time kernel
150s - max time network
145s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
20/08/2026, 10:16
General
- Target 17s65g0rcutjiioe.exe
- Size 76KB
- Sample260820-mbbkyscf69
- SHA256 56e8a69aa4a150a4e95cf57157b028c3355d5e8e9f05dc5309317dddeb2e55fa
Malware Config
Signatures
- Family: AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
- Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\17s65g0rcutjiioe.exe"C:\Users\Admin\AppData\Local\Temp\17s65g0rcutjiioe.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4376-0-0x0000026729FD0000-0x0000026729FEA000-memory.dmp
memory/4376-1-0x00007FFA0545F000-0x00007FFA05460000-memory.dmp
memory/4376-2-0x00007FFA052D0000-0x00007FFA05C74000-memory.dmp
memory/4376-3-0x00007FFA052D0000-0x00007FFA05C74000-memory.dmp
memory/4376-4-0x00007FFA052D0000-0x00007FFA05C74000-memory.dmp
memory/4376-5-0x00007FFA052D0000-0x00007FFA05C74000-memory.dmp
memory/4376-6-0x00007FFA052D0000-0x00007FFA05C74000-memory.dmp
memory/4376-7-0x00007FFA052D0000-0x00007FFA05C74000-memory.dmp
memory/4376-8-0x00007FFA052D0000-0x00007FFA05C74000-memory.dmp
memory/4376-9-0x00007FFA052D0000-0x00007FFA05C74000-memory.dmp
memory/4376-10-0x00007FFA052D0000-0x00007FFA05C74000-memory.dmp
memory/4376-11-0x00007FFA052D0000-0x00007FFA05C74000-memory.dmp
memory/4376-12-0x00007FFA052D0000-0x00007FFA05C74000-memory.dmp
memory/4376-13-0x00007FFA052D0000-0x00007FFA05C74000-memory.dmp
memory/4376-14-0x00007FFA052D0000-0x00007FFA05C74000-memory.dmp
memory/4376-15-0x00007FFA052D0000-0x00007FFA05C74000-memory.dmp