Behavioral task
behavioral1
Sample
sync.exe
Resource
win7-20230220-en
General
-
Target
sync.exe
-
Size
47KB
-
MD5
7a58245c7fecd0cc414ae350f0e0ecfd
-
SHA1
adb7c9266a2c729a1896ee1acd7783c469532f40
-
SHA256
44c79637bacf9b54f9bcc77447a84ae2456b57fd93954590ce24e19eecc2f341
-
SHA512
73235147f44912f526f4fa602b4c7157e7ce54f854272354dd242bda210f002f5e19ff569710bb961a769cd57c4be6a3edbe1057aa1b15b1e93ccd8026736f85
-
SSDEEP
768:Cu0DVTBRlc6nWUbmelmo2qjeDG2fsj+PKzPIAEeScQ0bt6U8CQegQWq5B9aFlsUd:Cu0DVTBnck2kWU+hAED2bt6ItW6uFls6
Malware Config
Extracted
asyncrat
0.5.7B
Christ
320r4rekowlmswpe
-
delay
3
-
install
true
-
install_file
winreg.exe
-
install_folder
%AppData%
-
pastebin_config
https://pastebin.com/raw/nAXieb7q
Files
-
sync.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ