Behavioral task
behavioral1
Sample
2228-7-0x0000000000820000-0x0000000000832000-memory.exe
Resource
win7-20230831-en
General
-
Target
2228-7-0x0000000000820000-0x0000000000832000-memory.dmp
-
Size
72KB
-
MD5
ff797c0d3ddd61c21dd5a3f6fb8a9aa9
-
SHA1
34b139dd41dab9ad8da0443bbb0af29e8f1ccf20
-
SHA256
81694201afae6abd392ddc3c3146edab614f40fe1343bd424f074a19aebc2957
-
SHA512
242ab9ca9e9cd64b2d26513d2e853b7ab393bf189a55ec93c6578d6a9db439e2e610047f28559e76610044dd972902699c0b1e86fb37c0cb868e0b4ff1d38893
-
SSDEEP
768:Eu/6ZTgoiziWUUM9rmo2qrb1C3cgyPIIzjbfgX3iPK1JzleRBDZTxBHm:Eu/6ZTgle20tgbI3boXSQNlevdTxFm
Malware Config
Extracted
asyncrat
0.5.7B
Default
bestsuccess.ddns.net:2442
AsyncMutex_6SI8OkPnk
-
delay
3
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
2228-7-0x0000000000820000-0x0000000000832000-memory.dmp.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ