General
-
Target
Cardlock_341121.bat
-
Size
59KB
-
Sample
230112-an2lpaeg47
-
MD5
b65fc5e20e962cbeda85ef448d1fba8e
-
SHA1
0b592f36e7f1561b5fab4925f37667be7aa1f5ee
-
SHA256
d3850a52c492fd7be069cf02e5ca9da6bff3d30fa09b97aa3e9c79979f96d170
-
SHA512
94337e8774e27e20576f06bc6592c021601a2f255d5779271f6aea527cbe969ff16d2cf7e899c60400f80ce50e156d9779764fe4d304c7d3e18fb4d082c5de9e
-
SSDEEP
1536:npuKFUvT3Hm6gFmMy9j8xC6aXdNBDh+7hGbU+0wFLY:npRUTBgFmzG0DBt+78bU+JFLY
Static task
static1
Behavioral task
behavioral1
Sample
Cardlock_341121.bat
Resource
win10-20220812-en
Behavioral task
behavioral2
Sample
Cardlock_341121.bat
Resource
win7-20221111-en
Behavioral task
behavioral3
Sample
Cardlock_341121.bat
Resource
win10v2004-20221111-en
Malware Config
Extracted
asyncrat
1.0.7 - modded by last
Default
su1d.nerdpol.ovh:8848
910301
-
delay
1
-
install
false
-
install_folder
%AppData%
Targets
-
-
Target
Cardlock_341121.bat
-
Size
59KB
-
MD5
b65fc5e20e962cbeda85ef448d1fba8e
-
SHA1
0b592f36e7f1561b5fab4925f37667be7aa1f5ee
-
SHA256
d3850a52c492fd7be069cf02e5ca9da6bff3d30fa09b97aa3e9c79979f96d170
-
SHA512
94337e8774e27e20576f06bc6592c021601a2f255d5779271f6aea527cbe969ff16d2cf7e899c60400f80ce50e156d9779764fe4d304c7d3e18fb4d082c5de9e
-
SSDEEP
1536:npuKFUvT3Hm6gFmMy9j8xC6aXdNBDh+7hGbU+0wFLY:npRUTBgFmzG0DBt+78bU+JFLY
-
Async RAT payload
-
Executes dropped EXE
-
Loads dropped DLL
-