720b2d599314eaf90cd60038f7e7d2e8

Classification: Malicious

720b2d599314eaf90cd60038f7e7d2e8 is a malicious file sample. Linked to Asyncrat malware. Reported by 3 threat sources, last seen 2024-08-06.

Detection summary

  • 96 antivirus detections
  • 1 IDS alerts
  • 8 processes observed
  • 3 contacted hosts
  • 3 DNS requests

MITRE ATT&CK associations

Malware families: ASYNCRAT (S1087)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
AsyncRAT ThreatFox Abuse.ch 2024-08-04 20:40:02 2024-08-06 20:18:33 S1087 AsyncRAT
Generic Malware Hybrid-Analysis 2024-08-04 13:15:03 2024-08-04 14:15:09
AsyncRAT MalwareBazaar Abuse.ch 2024-08-04 12:55:29 2024-08-04 12:55:29 malicious-activity S1087 AsyncRAT

Tags

evasive njrat stealer windows-server-utility win.asyncrat

Sample information

Filenames
720b2d599314eaf90cd60038f7e7d2e8
File type
PE32 executable (GUI) Intel 80386 Mono/.Net assemb ...
Size
179200 bytes
MD5
720b2d599314eaf90cd60038f7e7d2e8
SHA-1
76592e0a64b599fbb49d006faa2de4211dd79834
SHA-256
ea520d8e6ca1d44593f26ceea349d55709ebd61565f67368947d38e484f5846f
First indexed
2024-08-04 12:56:44
Last updated
2026-09-03 00:32:21

Antivirus detections

EngineDetection
APEXMalicious
AVGWin32:KeyloggerX-gen [Trj]
AhnLab-V3Backdoor/Win.AsyncRAT.C4932402
AlibabaBackdoor:MSIL/AsyncRat.fe20b88a
Antiy-AVLTrojan[Backdoor]/MSIL.Crysan
ArcabitTrojan.Jalapeno.D674
AvastWin32:KeyloggerX-gen [Trj]
AviraHEUR/AGEN.1365342
BitDefenderGen:Variant.Jalapeno.1652
BitDefenderThetaGen:NN.ZemsilF.36810.km0@aWj4Cbh
BkavW32.AIDetectMalware.CS
CAT-QuickHealTrojan.YakbeexMSIL.ZZ4
ClamAVWin.Packed.AsyncRAT-9856570-1
CrowdStrikewin/malicious_confidence_100% (W)
Cybereasonmalicious.99314e
CylanceUnsafe
DeepInstinctMALICIOUS
DrWebBackDoor.AsyncRATNET.2
ESET-NOD32a variant of MSIL/Agent.DWJ
ElasticWindows.Generic.Threat
EmsisoftGen:Variant.Jalapeno.1652 (B)
F-SecureHeuristic.HEUR/AGEN.1365342
FireEyeGeneric.mg.720b2d599314eaf9
FortinetMSIL/Agent.CFW!tr
GDataMSIL.Backdoor.DCRat.D
GoogleDetected
GridinsoftTrojan.Win32.AsyncRAT.tr
IkarusTrojan.MSIL.PSW
JiangminTrojan.MSIL.amfgq
K7AntiVirusTrojan ( 0059277e1 )
K7GWTrojan ( 0059277e1 )
KasperskyHEUR:Trojan-PSW.MSIL.Stealer.gen
KingsoftMSIL.Trojan-PSW.Stealer.gen
LionicTrojan.Win32.AsyncRAT.i!c
MAXmalware (ai score=88)
MalwarebytesGeneric.Malware.AI.DDS
MaxSecureTrojan.Malware.121218.susgen
McAfeeGenericRXVE-ZP!720B2D599314
McAfeeDReal Protect-LS!720B2D599314
MicroWorld-eScanGen:Variant.Jalapeno.1652
MicrosoftBackdoor:MSIL/AsyncRat!atmn
NANO-AntivirusTrojan.Win32.Stealer.kbmvdo
Paloaltogeneric.ml
PandaTrj/CI.A
RisingStealer.Agent!1.D483 (CLASSIC)
SUPERAntiSpywareTrojan.Agent/Gen-Crypt
SangforTrojan.Win32.Save.a
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win32.Generic.cm
SophosMal/AsyncRat-C
SymantecML.Attribute.HighConfidence
TACHYONBackdoor/W32.DN-Crysan.179200
TencentMalware.Win32.Gencirc.10bc9d0e
TrendMicroBackdoor.MSIL.ASYNCRAT.SMYXDEXZ
VBA32Trojan.MSIL.InfoStealer.gen.D
VIPREGen:Variant.Jalapeno.1652
VaristW32/MSIL_Agent.BTI.gen!Eldorado
ViRobotTrojan.Win.Z.Jalapeno.179200.BU
VirITTrojan.Win32.GenusT.DTXQ
YandexTrojan.Agent!IaVjqYXjrFY
ZillyaTrojan.Agent.Win32.2981387
ZoneAlarmHEUR:Trojan-PSW.MSIL.Stealer.gen
alibabacloudBackdoor:MSIL/AsyncRAT.Stub.GG!MTB
ALYacGen:Variant.Jalapeno.1652
AVGWin32:MalwareX-gen [Klg]
AlibabaBackdoor:MSIL/Crysen.15834405
AvastWin32:MalwareX-gen [Klg]
CTXexe.trojan.msil
DrWebTrojan.PWS.Stealer.39534
K7AntiVirusTrojan ( 005c228f1 )
K7GWTrojan ( 005c228f1 )
MaxSecureTrojan.Malware.74396735.susgen
SangforVirus.Win32.Save.a
SymantecDownloader
TencentTrojan-Spy.Msil.Stealer.ca
TrellixENSGenericRXVE-ZP!720B2D599314
TrendMicro-HouseCallBackdoor.MSIL.ASYNCRAT.SMYXDEXZ
WebrootW32.Trojan.Gen
XcitiumMalware@#3cu2v3a657urj
ZoneAlarmMal/AsyncRat-C
ZonerTrojan.Win32.178662
alibabacloudRat:Win/AsyncRAT.Stub
huorongTrojanSpy/MSIL.PwStealer.r
ALYacGen:Variant.AsyncRAT.23
ArcabitTrojan.AsyncRAT.23
AviraTR/W32.MalwareX
BitDefenderGen:Variant.AsyncRAT.23
BkavW32.Malware.39010EAC
ESET-NOD32MSIL/Agent.DWJ trojan
EmsisoftGen:Variant.AsyncRAT.23 (B)
F-SecureTrojan.TR/W32.MalwareX
Kingsoftmalware.kb.c.995
LionicTrojan.Win32.AsyncRAT.4!c
MalwarebytesAsyncRAT.Backdoor.Rat.DDS
MicroWorld-eScanGen:Variant.AsyncRAT.23
VIPREGen:Variant.AsyncRAT.23

Network contacts

104.16.184.241 172.67.196.114 149.154.167.220

DNS requests

api.mylnikov.org api.telegram.org icanhazip.com

Process list

NameCommand line
720b2d599314eaf90cd60038f7e7d2e8.exe
cmd.exe/C chcp 65001 && netsh wlan show profile | findstr All
chcp.comchcp 65001
netsh.exenetsh wlan show profile
findstr.exefindstr All
cmd.exe/C chcp 65001 && netsh wlan show networks mode=bssid
chcp.comchcp 65001
netsh.exenetsh wlan show networks mode=bssid