General
-
Target
lcomplcmpo.exe
-
Size
14.7MB
-
Sample
221205-hlctjsee62
-
MD5
6f6b812c166e53dc9b52b9b60e5ed369
-
SHA1
e60cf5e718c030182dec6f7fbbbbf884fcdfcca1
-
SHA256
ffead35df6bc101476d76393619fe0a06a57d93927417d9bcf814d2e4c6b36a0
-
SHA512
8e8e5fe21f4b08a053255beb0f4e55f03e0114e7fa2117b8ef8320e7fd88275771394cd9a7e4237793b370f980ff7ed45a6ff78d3d97d59cd077868e7602f4b9
-
SSDEEP
98304:YxPSlTK4rzJ7WH1jbqWpAFyLDEJLbYaqizJMsv2VRs7m4PDv1wmTfXlQ4ImVhwI:0PST7yxWM4nYaqilMsvkRsDCMfXZI8w
Static task
static1
Behavioral task
behavioral1
Sample
lcomplcmpo.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
lcomplcmpo.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
asyncrat
0.5.7B
DefenderSmartScren
217.64.31.3:8437
DefenderSmartScren
-
delay
3
-
install
false
-
install_file
SecurityHealtheurvice.exe
-
install_folder
%AppData%
Targets
-
-
Target
lcomplcmpo.exe
-
Size
14.7MB
-
MD5
6f6b812c166e53dc9b52b9b60e5ed369
-
SHA1
e60cf5e718c030182dec6f7fbbbbf884fcdfcca1
-
SHA256
ffead35df6bc101476d76393619fe0a06a57d93927417d9bcf814d2e4c6b36a0
-
SHA512
8e8e5fe21f4b08a053255beb0f4e55f03e0114e7fa2117b8ef8320e7fd88275771394cd9a7e4237793b370f980ff7ed45a6ff78d3d97d59cd077868e7602f4b9
-
SSDEEP
98304:YxPSlTK4rzJ7WH1jbqWpAFyLDEJLbYaqizJMsv2VRs7m4PDv1wmTfXlQ4ImVhwI:0PST7yxWM4nYaqilMsvkRsDCMfXZI8w
Score10/10-
Async RAT payload
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-