General
-
Target
微信分身.exe
-
Size
172KB
-
Sample
230602-f8f4daad4t
-
MD5
2607b49145280a76f8e5037704d30ec7
-
SHA1
db1b633aaf45e2e894b6a4737bbe7de23be6d11a
-
SHA256
9450e2068bf973136ee7a24c33e2c0740cb0a7ed501740c5e3c4bdc328fc92ea
-
SHA512
f3d080a1906c60438275a2365b20896f67352633f9c1cfd6148521dd1d4fde3310ed73ab934d4ee59df59eb46e516e951ff8cc9fb58a759eed3b22e1a1532a7e
-
SSDEEP
3072:xzpQb1Y2MC641lwP4D1wrmFEj9oB0OXFCY6arj+GMifDS:tpQbMofwgEw0OXFCztV
Static task
static1
Behavioral task
behavioral1
Sample
微信分身.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
微信分身.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
asyncrat
Default
38.55.205.246:8848
22F8B96D21DB3C632EB9
-
delay
1
-
install
false
-
install_folder
%AppData%
Targets
-
-
Target
微信分身.exe
-
Size
172KB
-
MD5
2607b49145280a76f8e5037704d30ec7
-
SHA1
db1b633aaf45e2e894b6a4737bbe7de23be6d11a
-
SHA256
9450e2068bf973136ee7a24c33e2c0740cb0a7ed501740c5e3c4bdc328fc92ea
-
SHA512
f3d080a1906c60438275a2365b20896f67352633f9c1cfd6148521dd1d4fde3310ed73ab934d4ee59df59eb46e516e951ff8cc9fb58a759eed3b22e1a1532a7e
-
SSDEEP
3072:xzpQb1Y2MC641lwP4D1wrmFEj9oB0OXFCY6arj+GMifDS:tpQbMofwgEw0OXFCztV
-
Async RAT payload
-
Executes dropped EXE
-
Loads dropped DLL
-