General
-
Target
PROCESO JURIDICO DOC (1).rev
-
Size
1.2MB
-
Sample
231116-dctngsfc38
-
MD5
69b2808f0f2ee355e2e09ab5e88d45f6
-
SHA1
a7e80c5dac318d4d91635262d28cf56aab459f32
-
SHA256
70e66269fdda2a652f36ab5f210fca880072caeb0351511526f830bea0ea4da7
-
SHA512
4d2fab711f79dc0abbb8becbf0fc3280205092b5db540dd4ffbfce57f4993e3647bd204d338c10a9d4c7a8f0c2bdbb800d789ac51dbcaa56f9b046b849093c22
-
SSDEEP
24576:GFS6iLzFA9HEcqqjnQmSGAcJQbKlg5bal+KNzXVhKzfSVbadnmFeVvUXLv:olim9HEKngncJQbKrMMFSfYbAYeVvsv
Static task
static1
Behavioral task
behavioral1
Sample
PROCESO JURIDICO DOC (1).7z
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
PROCESO JURIDICO DOC (1).7z
Resource
win10v2004-20231020-en
Malware Config
Extracted
asyncrat
| Edit 3LOSH RAT
TRACKMONEY
trackmoney.dynuddns.net:5959
AsyncMutex_6SI8OkPnk
-
delay
3
-
install
false
-
install_folder
%AppData%
Targets
-
-
Target
PROCESO JURIDICO DOC (1).rev
-
Size
1.2MB
-
MD5
69b2808f0f2ee355e2e09ab5e88d45f6
-
SHA1
a7e80c5dac318d4d91635262d28cf56aab459f32
-
SHA256
70e66269fdda2a652f36ab5f210fca880072caeb0351511526f830bea0ea4da7
-
SHA512
4d2fab711f79dc0abbb8becbf0fc3280205092b5db540dd4ffbfce57f4993e3647bd204d338c10a9d4c7a8f0c2bdbb800d789ac51dbcaa56f9b046b849093c22
-
SSDEEP
24576:GFS6iLzFA9HEcqqjnQmSGAcJQbKlg5bal+KNzXVhKzfSVbadnmFeVvUXLv:olim9HEKngncJQbKrMMFSfYbAYeVvsv
Score10/10-
Async RAT payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-