General
-
Target
C1CCB8872C05B12B9236FF9864BAF70384122ECFC5C81.exe
-
Size
47KB
-
Sample
220926-k3a3dsbdel
-
MD5
8256fff3e3076a08f34006dfd92599d9
-
SHA1
7287e1ed0ca90e615b5682007584ea1205b16ef6
-
SHA256
c1ccb8872c05b12b9236ff9864baf70384122ecfc5c819ff301ee8b83befbfff
-
SHA512
201e0e61b978d343175424c274d9fd3b82008aea2bbd520db1affd727a3865f69ad6ef7fc62234418038c1e051a7f655b1b6625437e1a7cd5229a0a70dd1430b
-
SSDEEP
768:Uov5MNNmnO4Gl2CNI13wRCn1OCDyjb5gr3iCqTwIixOrBLntoAkgWyClZ52tYcFX:Uov5MNQ9AUVebWrSCqToxUt81r5KmVcl
Behavioral task
behavioral1
Sample
C1CCB8872C05B12B9236FF9864BAF70384122ECFC5C81.exe
Resource
win7-20220901-en
Malware Config
Extracted
asyncrat
0.5.6D
Default
milla.publicvm.com:6606
milla.publicvm.com:7707
milla.publicvm.com:8808
lmusclajryfedtvbfd
-
delay
5
-
install
true
-
install_file
minecrafti.exe
-
install_folder
%AppData%
Targets
-
-
Target
C1CCB8872C05B12B9236FF9864BAF70384122ECFC5C81.exe
-
Size
47KB
-
MD5
8256fff3e3076a08f34006dfd92599d9
-
SHA1
7287e1ed0ca90e615b5682007584ea1205b16ef6
-
SHA256
c1ccb8872c05b12b9236ff9864baf70384122ecfc5c819ff301ee8b83befbfff
-
SHA512
201e0e61b978d343175424c274d9fd3b82008aea2bbd520db1affd727a3865f69ad6ef7fc62234418038c1e051a7f655b1b6625437e1a7cd5229a0a70dd1430b
-
SSDEEP
768:Uov5MNNmnO4Gl2CNI13wRCn1OCDyjb5gr3iCqTwIixOrBLntoAkgWyClZ52tYcFX:Uov5MNQ9AUVebWrSCqToxUt81r5KmVcl
-
Async RAT payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-