Behavioral task
behavioral1
Sample
C1CCB8872C05B12B9236FF9864BAF70384122ECFC5C81.exe
Resource
win7-20220901-en
General
-
Target
C1CCB8872C05B12B9236FF9864BAF70384122ECFC5C81.exe
-
Size
47KB
-
MD5
8256fff3e3076a08f34006dfd92599d9
-
SHA1
7287e1ed0ca90e615b5682007584ea1205b16ef6
-
SHA256
c1ccb8872c05b12b9236ff9864baf70384122ecfc5c819ff301ee8b83befbfff
-
SHA512
201e0e61b978d343175424c274d9fd3b82008aea2bbd520db1affd727a3865f69ad6ef7fc62234418038c1e051a7f655b1b6625437e1a7cd5229a0a70dd1430b
-
SSDEEP
768:Uov5MNNmnO4Gl2CNI13wRCn1OCDyjb5gr3iCqTwIixOrBLntoAkgWyClZ52tYcFX:Uov5MNQ9AUVebWrSCqToxUt81r5KmVcl
Malware Config
Extracted
asyncrat
0.5.6D
Default
milla.publicvm.com:6606
milla.publicvm.com:7707
milla.publicvm.com:8808
lmusclajryfedtvbfd
-
delay
5
-
install
true
-
install_file
minecrafti.exe
-
install_folder
%AppData%
Signatures
Files
-
C1CCB8872C05B12B9236FF9864BAF70384122ECFC5C81.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ