Analysis
- max time kernel
149s - max time network
114s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
13/09/2026, 03:17
General
- Target 26689ac43a18dc262656d2f95c0e9909585415c521e2f8f90fa90ad353484168.exe
- Size 78KB
- Sample260913-ds446a1bld
- SHA256 26689ac43a18dc262656d2f95c0e9909585415c521e2f8f90fa90ad353484168
Malware Config
Extracted
-
asyncrat
-
Venom RAT + HVNC + Stealer + Grabber v6.0.3
-
Default
-
ystiiavvhkzfdoasdyf
-
delay
1
-
install
false
-
install_folder
%AppData%
-
local_host
127.0.0.1
Signatures
- Family: AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
- Suspicious behavior: EnumeratesProcesses 30 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\26689ac43a18dc262656d2f95c0e9909585415c521e2f8f90fa90ad353484168.exe"C:\Users\Admin\AppData\Local\Temp\26689ac43a18dc262656d2f95c0e9909585415c521e2f8f90fa90ad353484168.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5816-0-0x00007FFE609EF000-0x00007FFE609F0000-memory.dmp
memory/5816-1-0x00000000007E0000-0x00000000007F8000-memory.dmp
memory/5816-3-0x00007FFE60860000-0x00007FFE61204000-memory.dmp
memory/5816-4-0x00007FFE60860000-0x00007FFE61204000-memory.dmp
memory/5816-5-0x00007FFE60860000-0x00007FFE61204000-memory.dmp
memory/5816-6-0x00007FFE60860000-0x00007FFE61204000-memory.dmp
memory/5816-7-0x00007FFE60860000-0x00007FFE61204000-memory.dmp
memory/5816-8-0x00007FFE60860000-0x00007FFE61204000-memory.dmp
memory/5816-9-0x00007FFE60860000-0x00007FFE61204000-memory.dmp
memory/5816-10-0x00007FFE60860000-0x00007FFE61204000-memory.dmp
memory/5816-11-0x00007FFE60860000-0x00007FFE61204000-memory.dmp
memory/5816-12-0x00007FFE60860000-0x00007FFE61204000-memory.dmp