Analysis
- max time kernel
150s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
13/10/2026, 03:15
General
- Target AsyncRAT/AsyncRAT.exe
- Size 6.4MB
- Sample261013-dr6atsac79
- SHA256 06899071233d61009a64c726a4523aa13d81c2517a0486cc99ac5931837008e5
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 23 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\AsyncRAT\AsyncRAT.exe"C:\Users\Admin\AppData\Local\Temp\AsyncRAT\AsyncRAT.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
user.config
e5f1e25051f9c302ca804fe92f3fff50_4adbe772-ebf1-478a-8d0c-00cb8ca465df
memory/4348-13-0x00007FFFED3B0000-0x00007FFFEDD54000-memory.dmp
memory/4348-11-0x00007FFFED3B0000-0x00007FFFEDD54000-memory.dmp
memory/4348-5-0x00000260EEDA0000-0x00000260EEFF2000-memory.dmp
memory/4348-6-0x00007FFFED3B0000-0x00007FFFEDD54000-memory.dmp
memory/4348-7-0x00007FFFED3B0000-0x00007FFFEDD54000-memory.dmp
memory/4348-8-0x00007FFFED3B0000-0x00007FFFEDD54000-memory.dmp
memory/4348-9-0x00007FFFED3B0000-0x00007FFFEDD54000-memory.dmp
memory/4348-15-0x00007FFFED3B0000-0x00007FFFEDD54000-memory.dmp
memory/4348-14-0x00007FFFED3B0000-0x00007FFFEDD54000-memory.dmp
memory/4348-12-0x00000260EFCA0000-0x00000260EFCAA000-memory.dmp
memory/4348-4-0x00007FFFED3B0000-0x00007FFFEDD54000-memory.dmp
memory/4348-0-0x00007FFFED53F000-0x00007FFFED540000-memory.dmp
memory/4348-10-0x00007FFFED3B0000-0x00007FFFEDD54000-memory.dmp
memory/4348-16-0x00007FFFED3B0000-0x00007FFFEDD54000-memory.dmp
memory/4348-17-0x00007FFFED3B0000-0x00007FFFEDD54000-memory.dmp
memory/4348-18-0x00007FFFED3B0000-0x00007FFFEDD54000-memory.dmp
memory/4348-19-0x00007FFFED3B0000-0x00007FFFEDD54000-memory.dmp
memory/4348-23-0x00000260F2960000-0x00000260F2972000-memory.dmp
memory/4348-24-0x00000260F3230000-0x00000260F34B0000-memory.dmp
memory/4348-2-0x00007FFFED3B0000-0x00007FFFEDD54000-memory.dmp
memory/4348-32-0x00007FFFED3B0000-0x00007FFFEDD54000-memory.dmp
memory/4348-1-0x00000260D4010000-0x00000260D467A000-memory.dmp
memory/4348-47-0x00007FFFED3B0000-0x00007FFFEDD54000-memory.dmp