General
-
Target
Comprobante de pago soporte de transaccion a cuenta bancaria.exe
-
Size
310KB
-
Sample
221205-l7bp6ahg39
-
MD5
7c17c418ac46c2a8e7ef03486ac2ed96
-
SHA1
6ed1f50056585cdd7352f5a9b926a75c31635f07
-
SHA256
1e701ee3eab5f0c8a99b418096fecc368a09a4f8f77e4a93d0d709a21c35ac3b
-
SHA512
1595f0c9d21f06967f3d6a7f12148f17dd5d72c413fc14027f6fbf4dbde4d193d587e883d12c54225503ea574265330176c2e3aaa469e6134f8a537806beef93
-
SSDEEP
6144:fUNLR2hzs3UB3zHNE3Oj1bJ3tONsE1kL9KPqKhf3OJ0YkRpE07ygea:u93U1ztuW1bJdONlk4CKhf3kkRpljea
Static task
static1
Behavioral task
behavioral1
Sample
Comprobante de pago soporte de transaccion a cuenta bancaria.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Comprobante de pago soporte de transaccion a cuenta bancaria.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
asyncrat
1.0.7
Default
mnvbvnvgc.duckdns.org:8026
DcRatMutex_qwqdanchun
-
delay
1
-
install
false
-
install_folder
%AppData%
Targets
-
-
Target
Comprobante de pago soporte de transaccion a cuenta bancaria.exe
-
Size
310KB
-
MD5
7c17c418ac46c2a8e7ef03486ac2ed96
-
SHA1
6ed1f50056585cdd7352f5a9b926a75c31635f07
-
SHA256
1e701ee3eab5f0c8a99b418096fecc368a09a4f8f77e4a93d0d709a21c35ac3b
-
SHA512
1595f0c9d21f06967f3d6a7f12148f17dd5d72c413fc14027f6fbf4dbde4d193d587e883d12c54225503ea574265330176c2e3aaa469e6134f8a537806beef93
-
SSDEEP
6144:fUNLR2hzs3UB3zHNE3Oj1bJ3tONsE1kL9KPqKhf3OJ0YkRpE07ygea:u93U1ztuW1bJdONlk4CKhf3kkRpljea
Score10/10-
Async RAT payload
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-