File name:

DOCUMENTO_DIGITAL-PDF.SCR

Full analysis: https://app.any.run/tasks/16177b95-5b22-4e4d-b949-5f37a6794aab
Verdict: Malicious activity
Threats:

AsyncRAT is a RAT that can monitor and remotely control infected systems. This malware was introduced on Github as a legitimate open-source remote administration software, but hackers use it for its many powerful malicious functions.

Analysis date: December 26, 2024, 22:47:45
OS: Windows 10 Professional (build: 19045, 64 bit)
Tags:
rat
asyncrat
remote
njrat
bladabindi
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386, for MS Windows, 9 sections
MD5:

310B905BFED52C5614157B4D80C50D36

SHA1:

700C78BCA2C1070D4C618CBEA2FC1E79103123AB

SHA256:

A257709B20CF2B3B07E1BDF22E756F2C16E2DE48FCE4852BD40F77743F82CAC9

SSDEEP:

98304:qzTV9QoNXK0KAUpM0lOF0J8tz2vZWuN5nTLSGKCcVItescYtEBsh2IteEBkvXvzf:jgA+a6+aL1

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.
  • MALICIOUS

    • Starts Visual C# compiler

      • DOCUMENTO_DIGITAL-PDF.SCR.exe (PID: 6200)
      • Final386421773.exe (PID: 5588)
    • Changes the autorun value in the registry

      • DOCUMENTO_DIGITAL-PDF.SCR.exe (PID: 6200)
      • Final386421773.exe (PID: 5588)
    • ASYNCRAT has been detected (YARA)

      • csc.exe (PID: 6756)
    • ASYNCRAT has been detected (SURICATA)

      • csc.exe (PID: 6756)
    • Bypass execution policy to execute commands

      • powershell.exe (PID: 3736)
    • Connects to the CnC server

      • csc.exe (PID: 4592)
    • NJRAT has been detected (SURICATA)

      • csc.exe (PID: 4592)
    • NJRAT has been detected (YARA)

      • csc.exe (PID: 4592)
    • NjRAT is detected

      • csc.exe (PID: 4592)
  • SUSPICIOUS

    • Contacting a server suspected of hosting an CnC

      • csc.exe (PID: 6756)
      • csc.exe (PID: 4592)
    • Connects to unusual port

      • csc.exe (PID: 6756)
      • csc.exe (PID: 4592)
    • Executable content was dropped or overwritten

      • csc.exe (PID: 6756)
    • Reads security settings of Internet Explorer

      • csc.exe (PID: 6756)
    • Starts CMD.EXE for commands execution

      • csc.exe (PID: 6756)
    • Starts POWERSHELL.EXE for commands execution

      • cmd.exe (PID: 1296)
    • Starts process via Powershell

      • powershell.exe (PID: 3736)
  • INFO

    • Checks supported languages

      • DOCUMENTO_DIGITAL-PDF.SCR.exe (PID: 6200)
      • csc.exe (PID: 6756)
      • Final386421773.exe (PID: 5588)
      • csc.exe (PID: 4592)
    • Reads the computer name

      • DOCUMENTO_DIGITAL-PDF.SCR.exe (PID: 6200)
      • csc.exe (PID: 6756)
      • csc.exe (PID: 4592)
      • Final386421773.exe (PID: 5588)
    • The sample compiled with english language support

      • DOCUMENTO_DIGITAL-PDF.SCR.exe (PID: 6200)
      • csc.exe (PID: 6756)
    • Reads the machine GUID from the registry

      • csc.exe (PID: 6756)
      • csc.exe (PID: 4592)
    • Manual execution by a user

      • Taskmgr.exe (PID: 7076)
      • Taskmgr.exe (PID: 7128)
    • Reads the software policy settings

      • csc.exe (PID: 6756)
    • Reads security settings of Internet Explorer

      • Taskmgr.exe (PID: 7128)
    • Create files in a temporary directory

      • csc.exe (PID: 6756)
    • The process uses the downloaded file

      • csc.exe (PID: 6756)
      • powershell.exe (PID: 3736)
    • Process checks computer location settings

      • csc.exe (PID: 6756)
    • The executable file from the user directory is run by the Powershell process

      • Final386421773.exe (PID: 5588)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | InstallShield setup (45.2)
.exe | Win32 EXE PECompact compressed (generic) (43.6)
.exe | Win32 Executable (generic) (4.7)
.exe | Win16/32 Executable Delphi generic (2.1)
.exe | Generic Win/DOS Executable (2.1)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2011:07:07 20:53:16+00:00
ImageFileCharacteristics: Executable, No line numbers, No symbols, Bytes reversed lo, 32-bit, Bytes reversed hi
PEType: PE32
LinkerVersion: 2.25
CodeSize: 1310208
InitializedDataSize: 11052544
UninitializedDataSize: -
EntryPoint: 0x141834
OSVersion: 5
ImageVersion: -
SubsystemVersion: 5
Subsystem: Windows GUI
FileVersionNumber: 2006.0.0.0
ProductVersionNumber: 2006.0.0.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: English (U.S.)
CharacterSet: Windows, Latin1
CompanyName: -
FileDescription: -
FileVersion: 2006.0.0.0
InternalName: -
LegalCopyright: -
LegalTrademarks: -
OriginalFileName: -
ProductName: -
ProductVersion: 1.0.0.0
Comments: -
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
134
Monitored processes
10
Malicious processes
6
Suspicious processes
0

Behavior graph

Click at the process to see the details
start documento_digital-pdf.scr.exe #ASYNCRAT csc.exe svchost.exe taskmgr.exe no specs taskmgr.exe cmd.exe no specs conhost.exe no specs powershell.exe no specs final386421773.exe #NJRAT csc.exe

Process information

PID
CMD
Path
Indicators
Parent process
1296"C:\Windows\System32\cmd.exe" /c start /b powershell –ExecutionPolicy Bypass Start-Process -FilePath '"C:\Users\admin\AppData\Local\Temp\Final386421773.exe"' & exitC:\Windows\SysWOW64\cmd.execsc.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Command Processor
Exit code:
0
Version:
10.0.19041.3636 (WinBuild.160101.0800)
Modules
Images
c:\windows\syswow64\cmd.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvcrt.dll
2192C:\WINDOWS\system32\svchost.exe -k NetworkService -p -s DnscacheC:\Windows\System32\svchost.exe
services.exe
User:
NETWORK SERVICE
Company:
Microsoft Corporation
Integrity Level:
SYSTEM
Description:
Host Process for Windows Services
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\svchost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\kernel.appcore.dll
2744\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1C:\Windows\System32\conhost.execmd.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Console Window Host
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\conhost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\shcore.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
3736powershell –ExecutionPolicy Bypass Start-Process -FilePath '"C:\Users\admin\AppData\Local\Temp\Final386421773.exe"' C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.execmd.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows PowerShell
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\syswow64\windowspowershell\v1.0\powershell.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvcrt.dll
4592"C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe
Final386421773.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Visual C# Command Line Compiler
Version:
4.8.9037.0 built by: NET481REL1
Modules
Images
c:\windows\microsoft.net\framework\v4.0.30319\csc.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\mscoree.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\advapi32.dll
5588"C:\Users\admin\AppData\Local\Temp\Final386421773.exe" C:\Users\admin\AppData\Local\Temp\Final386421773.exe
powershell.exe
User:
admin
Company:
Zoom Video Communications, Inc.
Integrity Level:
MEDIUM
Description:
Zoom
Exit code:
3735928559
Version:
6,2,10,25527
Modules
Images
c:\users\admin\appdata\local\temp\final386421773.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\user32.dll
6200"C:\Users\admin\Desktop\DOCUMENTO_DIGITAL-PDF.SCR.exe" C:\Users\admin\Desktop\DOCUMENTO_DIGITAL-PDF.SCR.exe
explorer.exe
User:
admin
Integrity Level:
MEDIUM
Exit code:
0
Version:
2006.0.0.0
Modules
Images
c:\users\admin\desktop\documento_digital-pdf.scr.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\oleaut32.dll
6756"C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe
DOCUMENTO_DIGITAL-PDF.SCR.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Visual C# Command Line Compiler
Version:
4.8.9037.0 built by: NET481REL1
Modules
Images
c:\windows\microsoft.net\framework\v4.0.30319\csc.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\mscoree.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
7076"C:\WINDOWS\system32\taskmgr.exe" /4C:\Windows\System32\Taskmgr.exeexplorer.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Task Manager
Exit code:
3221226540
Version:
10.0.19041.3636 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\taskmgr.exe
c:\windows\system32\ntdll.dll
7128"C:\WINDOWS\system32\taskmgr.exe" /4C:\Windows\System32\Taskmgr.exe
explorer.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Task Manager
Version:
10.0.19041.3636 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\taskmgr.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\powrprof.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\combase.dll
Total events
10 725
Read events
10 705
Write events
19
Delete events
1

Modification events

(PID) Process:(6200) DOCUMENTO_DIGITAL-PDF.SCR.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Operation:writeName:AxCrypt
Value:
C:\Users\admin\Favorites\AxCrypt\Bin\AxCrypt.exe
(PID) Process:(7128) Taskmgr.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\TaskManager
Operation:delete valueName:Preferences
Value:
(PID) Process:(7128) Taskmgr.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\TaskManager
Operation:writeName:Preferences
Value:
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
(PID) Process:(6756) csc.exeKey:HKEY_CURRENT_USER\SOFTWARE\EFB229F3C855C29000E0
Operation:writeName:54A25BAFF557DB5C79E3CC342368ADFCFD9AB2EA9908343A4F6A6267258007D1
Value:
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
(PID) Process:(5588) Final386421773.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Operation:writeName:userModel
Value:
C:\Users\admin\Favorites\my-web-app\backend\userModel.exe
(PID) Process:(4592) csc.exeKey:HKEY_CURRENT_USER\SOFTWARE\3dab09b5b699464
Operation:writeName:[kl]
Value:
(PID) Process:(6756) csc.exeKey:HKEY_CURRENT_USER\SOFTWARE\EFB229F3C855C29000E0
Operation:writeName:518FD63C51D5599AB3F578718735EA43550705A3CD53F6C2782203005BC1F1C3
Value:
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
Executable files
1
Suspicious files
1
Text files
3
Unknown types
0

Dropped files

PID
Process
Filename
Type
6200DOCUMENTO_DIGITAL-PDF.SCR.exeC:\Users\admin\Favorites\AxCrypt\Bin\AxCrypt.exe
MD5:
SHA256:
5588Final386421773.exeC:\Users\admin\Favorites\my-web-app\backend\userModel.exe
MD5:
SHA256:
3736powershell.exeC:\Users\admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractivebinary
MD5:58D0F675FFA7A087D6A6947A913311FE
SHA256:BF70CC3A1EF3B9D0D43172B956647588F15FB0093DE8A8B88D2AE20668C6939F
3736powershell.exeC:\Users\admin\AppData\Local\Temp\__PSScriptPolicyTest_5wdyzpsq.nxl.psm1text
MD5:D17FE0A3F47BE24A6453E9EF58C94641
SHA256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
3736powershell.exeC:\Users\admin\AppData\Local\Temp\__PSScriptPolicyTest_f3e1ocfu.a3z.ps1text
MD5:D17FE0A3F47BE24A6453E9EF58C94641
SHA256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
6756csc.exeC:\Users\admin\AppData\Local\Temp\Final386421773.exeexecutable
MD5:F66154579E69998987F2EA80CB651495
SHA256:82B584C0E103DD136FB8428EA55AFA21DE0340A19C5FD33697E329D7AF9F0BE7
7128Taskmgr.exeC:\Users\admin\AppData\Local\D3DSCache\3534848bb9f4cb71\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.locktext
MD5:F49655F856ACB8884CC0ACE29216F511
SHA256:7852FCE59C67DDF1D6B8B997EAA1ADFAC004A9F3A91C37295DE9223674011FBA
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
7
TCP/UDP connections
36
DNS requests
20
Threats
13

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
4712
MoUsoCoreWorker.exe
GET
200
2.16.164.49:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
whitelisted
4712
MoUsoCoreWorker.exe
GET
200
88.221.169.152:80
http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl
unknown
whitelisted
1176
svchost.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
whitelisted
5092
backgroundTaskHost.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D
unknown
whitelisted
5064
SearchApp.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D
unknown
whitelisted
6812
SIHClient.exe
GET
200
88.221.169.152:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
whitelisted
6812
SIHClient.exe
GET
200
88.221.169.152:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
192.168.100.255:137
unknown
5448
svchost.exe
40.127.240.158:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
40.127.240.158:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
4712
MoUsoCoreWorker.exe
2.16.164.49:80
crl.microsoft.com
Akamai International B.V.
NL
whitelisted
4712
MoUsoCoreWorker.exe
88.221.169.152:80
www.microsoft.com
AKAMAI-AS
DE
whitelisted
4
System
192.168.100.255:138
whitelisted
1176
svchost.exe
20.190.159.64:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
5064
SearchApp.exe
2.23.209.187:443
www.bing.com
Akamai International B.V.
GB
unknown
1176
svchost.exe
192.229.221.95:80
ocsp.digicert.com
EDGECAST
US
whitelisted
5064
SearchApp.exe
192.229.221.95:80
ocsp.digicert.com
EDGECAST
US
whitelisted

DNS requests

Domain
IP
Reputation
settings-win.data.microsoft.com
  • 40.127.240.158
  • 51.104.136.2
whitelisted
crl.microsoft.com
  • 2.16.164.49
  • 2.16.164.120
whitelisted
google.com
  • 172.217.16.206
whitelisted
www.microsoft.com
  • 88.221.169.152
whitelisted
login.live.com
  • 20.190.159.64
  • 20.190.159.4
  • 40.126.31.69
  • 20.190.159.75
  • 20.190.159.71
  • 40.126.31.71
  • 40.126.31.73
  • 20.190.159.2
whitelisted
www.bing.com
  • 2.23.209.187
  • 2.23.209.149
  • 2.23.209.189
  • 2.23.209.185
  • 2.23.209.140
  • 2.23.209.133
  • 2.23.209.176
  • 2.23.209.130
  • 2.23.209.182
whitelisted
ocsp.digicert.com
  • 192.229.221.95
whitelisted
go.microsoft.com
  • 184.28.89.167
whitelisted
arc.msn.com
  • 20.74.47.205
whitelisted
slscr.update.microsoft.com
  • 52.149.20.212
whitelisted

Threats

PID
Process
Class
Message
2192
svchost.exe
Potentially Bad Traffic
ET INFO DYNAMIC_DNS Query to a *.duckdns .org Domain
2192
svchost.exe
Misc activity
ET INFO DYNAMIC_DNS Query to *.duckdns. Domain
6756
csc.exe
Domain Observed Used for C2 Detected
REMOTE [ANY.RUN] AsyncRAT SSL certificate
6756
csc.exe
Domain Observed Used for C2 Detected
ET MALWARE Observed Malicious SSL Cert (AsyncRAT)
6756
csc.exe
Malware Command and Control Activity Detected
REMOTE [ANY.RUN] AsyncRAT Successful Connection
2192
svchost.exe
Potentially Bad Traffic
ET INFO DYNAMIC_DNS Query to a *.duckdns .org Domain
2192
svchost.exe
Misc activity
ET INFO DYNAMIC_DNS Query to *.duckdns. Domain
4592
csc.exe
Malware Command and Control Activity Detected
ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)
5 ETPRO signatures available at the full report
No debug info