General
-
Target
KKAAYY.bat
-
Size
48KB
-
Sample
230201-wrcydsda3t
-
MD5
83875df1ddf8a47531e763f5bc140691
-
SHA1
8d1bc0c5bceedd229b8faaf6542779726188b145
-
SHA256
a15f29572a149a04d45b8c01daa047ec9f517077a507f8d53ac9b8a8ceed4a34
-
SHA512
e19c020f4fe1922a4adef3dd50851514a99852b7eefa9b74e6e954f941349a60589e171a618423d0029e8d3e8568536026a1012586a74daa4d19a1ebabb701a7
-
SSDEEP
768:xZZOUUP++sgCpDgSE2WPENq+qrD/PESqitk3Spn1eqy1nUNamt:m+qCNgNgqdj1qitvl
Static task
static1
Behavioral task
behavioral1
Sample
KKAAYY.bat
Resource
win10-20220812-en
Behavioral task
behavioral2
Sample
KKAAYY.bat
Resource
win7-20221111-en
Malware Config
Extracted
asyncrat
0.5.7B
Default
churchmon.ddns.net:6606
churchmon.ddns.net:7707
churchmon.ddns.net:8808
churchmon21.ddns.net:6606
churchmon21.ddns.net:7707
churchmon21.ddns.net:8808
churchmon22.ddns.net:6606
churchmon22.ddns.net:7707
churchmon22.ddns.net:8808
AsyncMutex_6SI8OkPnk
-
delay
3
-
install
false
-
install_folder
%AppData%
Targets
-
-
Target
KKAAYY.bat
-
Size
48KB
-
MD5
83875df1ddf8a47531e763f5bc140691
-
SHA1
8d1bc0c5bceedd229b8faaf6542779726188b145
-
SHA256
a15f29572a149a04d45b8c01daa047ec9f517077a507f8d53ac9b8a8ceed4a34
-
SHA512
e19c020f4fe1922a4adef3dd50851514a99852b7eefa9b74e6e954f941349a60589e171a618423d0029e8d3e8568536026a1012586a74daa4d19a1ebabb701a7
-
SSDEEP
768:xZZOUUP++sgCpDgSE2WPENq+qrD/PESqitk3Spn1eqy1nUNamt:m+qCNgNgqdj1qitvl
-
Async RAT payload
-
Executes dropped EXE
-
Loads dropped DLL
-