General
-
Target
3357b66c29f17a70151645c4a4952c7b4c81b1f42532e8e84c137e2c27d95a2c
-
Size
78KB
-
Sample
220121-3j8hnaddgk
-
MD5
89fdfbcd6cd79798d8469942afda14e2
-
SHA1
86e28eb8cd37fd6602eaa55e594b2b6c930a66e7
-
SHA256
3357b66c29f17a70151645c4a4952c7b4c81b1f42532e8e84c137e2c27d95a2c
-
SHA512
e5b79d80da085e934ce130fc8596e8cc18b49e00a0675d134334b93c9694281b7b58d45c0245b931468236b4bedc87226d4ca381480c70c98fc90789b62f8f33
Static task
static1
Behavioral task
behavioral1
Sample
3357b66c29f17a70151645c4a4952c7b4c81b1f42532e8e84c137e2c27d95a2c.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
3357b66c29f17a70151645c4a4952c7b4c81b1f42532e8e84c137e2c27d95a2c.exe
Resource
win10-en-20211208
Malware Config
Extracted
asyncrat
0.5.7B
Default
pruebanumerounoaa.duckdns.org:1992
AsyncMutex_6SI8OkPnk
-
anti_vm
false
-
bsod
false
-
delay
3
-
install
true
-
install_file
calc.exe
-
install_folder
%AppData%
-
pastebin_config
null
Targets
-
-
Target
3357b66c29f17a70151645c4a4952c7b4c81b1f42532e8e84c137e2c27d95a2c
-
Size
78KB
-
MD5
89fdfbcd6cd79798d8469942afda14e2
-
SHA1
86e28eb8cd37fd6602eaa55e594b2b6c930a66e7
-
SHA256
3357b66c29f17a70151645c4a4952c7b4c81b1f42532e8e84c137e2c27d95a2c
-
SHA512
e5b79d80da085e934ce130fc8596e8cc18b49e00a0675d134334b93c9694281b7b58d45c0245b931468236b4bedc87226d4ca381480c70c98fc90789b62f8f33
Score10/10-
Modifies WinLogon for persistence
-
Async RAT payload
-
Executes dropped EXE
-
Loads dropped DLL
-