Behavioral task
behavioral1
Sample
4F67BD027CBC6AE58D42777050C8F103.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4F67BD027CBC6AE58D42777050C8F103.exe
Resource
win10v2004-20231130-en
General
-
Target
4F67BD027CBC6AE58D42777050C8F103.exe
-
Size
100KB
-
MD5
4f67bd027cbc6ae58d42777050c8f103
-
SHA1
12c402049cb4a6f92d5c00cc5cc926a15763df88
-
SHA256
a5b7a0f311693383814b25bbc0779e9a3fd4c56fb5d0aef6af3e4ff49926b6e2
-
SHA512
6efcc23e9b6abb0943a513de153744fb97fc923d87c4b392d0a2514fb85190a38479c99a85cef00c38b4663984e0fcfee40bbacbffb72482f072cd0167c48a38
-
SSDEEP
3072:hugTTcIb25skDy3bCinN90uHQbPRyZ2pPYjq:hugZK5O3bxzD8AZ2j
Malware Config
Extracted
asyncrat
0.5.8
github
trbe.mentality.cloud:6606
trbe.mentality.cloud:7707
trbe.mentality.cloud:8808
KAtgcMRAwDz0
-
delay
3
-
install
true
-
install_file
Printer.exe
-
install_folder
%Temp%
Signatures
Files
-
4F67BD027CBC6AE58D42777050C8F103.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ