General
-
Target
fbe6106f08c4bb657a458ec468974e934fd87fd513ec39ae26e375bf247f7853
-
Size
819KB
-
Sample
220708-kpe47abhg3
-
MD5
42cc3be58c0265d243bd2c8bfaadacd5
-
SHA1
174e318766bf7b16303151812915dc95986137c7
-
SHA256
fbe6106f08c4bb657a458ec468974e934fd87fd513ec39ae26e375bf247f7853
-
SHA512
ca4b5e520096beff8c34f47207e013480e1af55b7012ff683005a74cc6de53c2ccaf925208a8bae6433b76b3a18fa5b84b28d3b09b23889285d43411a8c08bb3
Static task
static1
Behavioral task
behavioral1
Sample
fbe6106f08c4bb657a458ec468974e934fd87fd513ec39ae26e375bf247f7853.exe
Resource
win7-20220414-en
Malware Config
Extracted
asyncrat
0.5.7B
Default
Squeruu-39056.portmap.host:39056
Squeruu-39056.portmap.host:80
AsyncMutex_6SI8OkPnk
-
delay
3
-
install
true
-
install_file
cheatengine.EXE.exe
-
install_folder
%AppData%
Targets
-
-
Target
fbe6106f08c4bb657a458ec468974e934fd87fd513ec39ae26e375bf247f7853
-
Size
819KB
-
MD5
42cc3be58c0265d243bd2c8bfaadacd5
-
SHA1
174e318766bf7b16303151812915dc95986137c7
-
SHA256
fbe6106f08c4bb657a458ec468974e934fd87fd513ec39ae26e375bf247f7853
-
SHA512
ca4b5e520096beff8c34f47207e013480e1af55b7012ff683005a74cc6de53c2ccaf925208a8bae6433b76b3a18fa5b84b28d3b09b23889285d43411a8c08bb3
-
Async RAT payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-