Analysis
-
max time kernel
124s -
max time network
52s -
platform
windows10-2004_x64 -
resource
win10v2004-20231130-en -
resource tags
arch:x64arch:x86image:win10v2004-20231130-enlocale:en-usos:windows10-2004-x64system -
submitted
06-12-2023 01:08
Behavioral task
behavioral1
Sample
bSkM.exe
Resource
win7-20231201-en
2 signatures
150 seconds
General
-
Target
bSkM.exe
-
Size
47KB
-
MD5
83e1f30671acc3ca235a7bfa4dce9e15
-
SHA1
ea23d4324743d21917d7212fe59d19c894c13583
-
SHA256
e879574d750ebd02a3affea08fca995185c05ed7deda29882463b3f81c25d6e1
-
SHA512
ab7fe4eeb83e8e13cbfb416750f7663aa79f136925862010a16ee0011ed9c343c2f00555466c8aa784ac1782bf272d5a94d6b0eb1e833ab60e46a8d28d5492c6
-
SSDEEP
768:d6T3ILNCKi+DiBtelDSN+iV08YbygeKXmU2LvEgK/J9lZVc6KN:d6YmBtKDs4zb1RmUYnkJ3ZVclN
Malware Config
Extracted
Family
asyncrat
Version
1.0.7
Botnet
jojojoj
C2
window10.duckdns.org:2016
Mutex
5&TY#W635yw4
Attributes
-
delay
1
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1488-0-0x0000000000AD0000-0x0000000000AE2000-memory.dmpFilesize
72KB
-
memory/1488-1-0x00007FF84DF10000-0x00007FF84E9D1000-memory.dmpFilesize
10.8MB
-
memory/1488-2-0x000000001B850000-0x000000001B860000-memory.dmpFilesize
64KB
-
memory/1488-3-0x00007FF84DF10000-0x00007FF84E9D1000-memory.dmpFilesize
10.8MB