Analysis
-
max time kernel
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
08-01-2024 20:49
Behavioral task
behavioral1
Sample
d1cc9c3dfe7a71d641ead1f15911a697b5daa63a6a2ce7030a22d947d9847d91.exe
Resource
win7-20231129-en
windows7-x64
3 signatures
150 seconds
General
-
Target
d1cc9c3dfe7a71d641ead1f15911a697b5daa63a6a2ce7030a22d947d9847d91.exe
-
Size
340KB
-
MD5
71beab388a6fe442ce8736ca8625dd72
-
SHA1
c594208ed681009338833ef4baa1b43e4f3ff7cf
-
SHA256
d1cc9c3dfe7a71d641ead1f15911a697b5daa63a6a2ce7030a22d947d9847d91
-
SHA512
9f6764899ee48ac3cc23cdfd18ef5289565d351c172e08b2699dc455986f6705f98de4d46a015ece1b0f04c1212642e4a121f4e0cd65fbfef49cd73ac9e569a5
-
SSDEEP
6144:m7xbOgrqt8NiB/gzKETwEMATGKi5fbAl/yEaqne0Z07a7igtEZ:mat8NiVcTwYiKakk/90btEZ
Malware Config
Signatures
-
Async RAT payload 1 IoCs
resource yara_rule behavioral2/memory/1552-0-0x0000000000BC0000-0x0000000000C56000-memory.dmp asyncrat -
resource yara_rule behavioral2/memory/1552-0-0x0000000000BC0000-0x0000000000C56000-memory.dmp vmprotect