Behavioral task
behavioral1
Sample
73a61b293ebca1acf9ead923e44f94479d6716803890cdd99622108f93cd29df.exe
Resource
win7-20220901-en
General
-
Target
73a61b293ebca1acf9ead923e44f94479d6716803890cdd99622108f93cd29df
-
Size
50KB
-
MD5
3201ce4bd9cda483a81ec556b5e76740
-
SHA1
609c4d99f6d1ccd90ec3865793ef9d814363ef10
-
SHA256
73a61b293ebca1acf9ead923e44f94479d6716803890cdd99622108f93cd29df
-
SHA512
30d4417be09e395f69d38aeedcbbd63b084aff48d05893cec39e121469a2aeb4f3e731747baf48faa09876138e8562e7677b85cb429d340870292d191212b20b
-
SSDEEP
768:5ztVzK64orfL4mBaQaETaQiajdVPiOKjbPgp1kKitI6FRd+azw1Pzc:ng6PzLftaX2iOGbPgbzkb8tzc
Malware Config
Extracted
asyncrat
0.5.7B
Default
94.177.245.135:9656
AsyncMutex_6SI8OkPnk
-
delay
60
-
install
true
-
install_file
updater.exe
-
install_folder
%AppData%
Signatures
-
Asyncrat family
Files
-
73a61b293ebca1acf9ead923e44f94479d6716803890cdd99622108f93cd29df.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ