General
-
Target
aebf016b75a0461729b84255f307d279a60675a8769affdb69f9ad68ba9b86b3.zip
-
Size
145KB
-
Sample
210915-ktbbssddbq
-
MD5
5bf04f79c8111c58ff270a48838a550e
-
SHA1
ab8ef93934030b4526691781ac3550e417832543
-
SHA256
01b992ca30617c156d0d6c7e209b39b044099c1c71f1114fc4045b226b3e9582
-
SHA512
9cd46607e22f3b80e342e537a2c117f3480b9b2ad151b3eafe2546fad288e80a6119dc64e07e3556eb94927ab7767f16b35cc94c190f7d248fb9e40fc307c779
Static task
static1
Behavioral task
behavioral1
Sample
aebf016b75a0461729b84255f307d279a60675a8769affdb69f9ad68ba9b86b3.exe
Resource
win7-en
Behavioral task
behavioral2
Sample
aebf016b75a0461729b84255f307d279a60675a8769affdb69f9ad68ba9b86b3.exe
Resource
win10v20210408
Malware Config
Extracted
asyncrat
0.5.7B
WIRE$$$$$$$$
severdops.ddns.net:6204
AsyncMutex_6SI8OkPnk
-
anti_vm
false
-
bsod
false
-
delay
3
-
install
true
-
install_file
iconfx.exe
-
install_folder
%AppData%
-
pastebin_config
null
Targets
-
-
Target
aebf016b75a0461729b84255f307d279a60675a8769affdb69f9ad68ba9b86b3.exe
-
Size
585KB
-
MD5
02179909185ee25814dd4ea226540021
-
SHA1
d54bd08e2c4b7aa3971eff0ee15ac064889c1f5b
-
SHA256
aebf016b75a0461729b84255f307d279a60675a8769affdb69f9ad68ba9b86b3
-
SHA512
6933dcc2d81d62d12756436df4f8bde39fe1ccb868b73a323153dbb360059cb82111d5ff134c43269879cf8dbb9b69a17732fccbfa927295e87a82831dea9105
Score10/10-
Async RAT payload
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-