General
-
Target
8dd48cd023c9f13b6b41274c1b6d3be2907dbd929dda7701972b73a029df74b5
-
Size
186KB
-
Sample
230808-lq9wmabg44
-
MD5
ab161491c05bb4e14c9956bd90dec42f
-
SHA1
4f3fa749a5ab5aa69fb762c4f438f2759abf2c31
-
SHA256
8dd48cd023c9f13b6b41274c1b6d3be2907dbd929dda7701972b73a029df74b5
-
SHA512
530bcb714475e55a8e6d7e23ec785140cc988eb4062a2e21cd8893afd33112c839c8cd2e003224ba8246a47afb17b99040780c738f5342e28ad61776e83f7816
-
SSDEEP
3072:0v+8ni6dAi2D6r99PsY8qswZHM+JdBsfUKQn1b8oCikdOFqDdI:0v+uT289RZs+7mobkdOFEI
Static task
static1
Malware Config
Extracted
asyncrat
0.5.7B
DefaultT
greightcethebui.sytes.net:1414
greightcethebui.sytes.net:6767
wreightcethebui.sytes.net:1414
wreightcethebui.sytes.net:6767
AsyncMutex_6SI8OkPnW
-
delay
3
-
install
true
-
install_file
oscr.exe
-
install_folder
%AppData%
Targets
-
-
Target
8dd48cd023c9f13b6b41274c1b6d3be2907dbd929dda7701972b73a029df74b5
-
Size
186KB
-
MD5
ab161491c05bb4e14c9956bd90dec42f
-
SHA1
4f3fa749a5ab5aa69fb762c4f438f2759abf2c31
-
SHA256
8dd48cd023c9f13b6b41274c1b6d3be2907dbd929dda7701972b73a029df74b5
-
SHA512
530bcb714475e55a8e6d7e23ec785140cc988eb4062a2e21cd8893afd33112c839c8cd2e003224ba8246a47afb17b99040780c738f5342e28ad61776e83f7816
-
SSDEEP
3072:0v+8ni6dAi2D6r99PsY8qswZHM+JdBsfUKQn1b8oCikdOFqDdI:0v+uT289RZs+7mobkdOFEI
-
Async RAT payload
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-