Overview
overview
10Static
static
11 NOTIFICA... ..exe
windows7-x64
101 NOTIFICA... ..exe
windows10-2004-x64
101 NOTIFICA...er.dll
windows7-x64
11 NOTIFICA...er.dll
windows10-2004-x64
11 NOTIFICA...20.dll
windows7-x64
11 NOTIFICA...20.dll
windows10-2004-x64
11 NOTIFICA...20.dll
windows7-x64
11 NOTIFICA...20.dll
windows10-2004-x64
1General
-
Target
1 NOTIFICACION DEMANDA.REV
-
Size
1.8MB
-
Sample
240119-xpvwvscdd8
-
MD5
294c11b20ab53ed4b6e02bf2584d4fe4
-
SHA1
5dea82ff0b8df8b923e8c03f2aca1d0a3877c367
-
SHA256
717d495a0fa09889abeb7eb44f5395ee7cfc22a79ec6020d3452110c293f53c4
-
SHA512
8605fcac90c0da7d79b1c63710b2657a118fe65231871356201825641e5f02d528df75145db2cf8b5724e83e4c8d561cea647710e0aad346aab84650e12ab225
-
SSDEEP
49152:epkhEAZmF7pOAzaOD3molRe8iZPHmtNsj:JD0F9O4abolQZmto
Static task
static1
Behavioral task
behavioral1
Sample
1 NOTIFICACION DEMANDA/1 NOTIFICACION DEMANDA ..exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1 NOTIFICACION DEMANDA/1 NOTIFICACION DEMANDA ..exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
1 NOTIFICACION DEMANDA/Register.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
1 NOTIFICACION DEMANDA/Register.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
1 NOTIFICACION DEMANDA/rtl120.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
1 NOTIFICACION DEMANDA/rtl120.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
1 NOTIFICACION DEMANDA/vcl120.dll
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
1 NOTIFICACION DEMANDA/vcl120.dll
Resource
win10v2004-20231215-en
Malware Config
Extracted
asyncrat
| CRACKED BY https://t.me/xworm_v2
Default
ancy2024.kozow.com:1234
AsyncMutex_6SI8OkPnk
-
delay
3
-
install
false
-
install_folder
%AppData%
Targets
-
-
Target
1 NOTIFICACION DEMANDA/1 NOTIFICACION DEMANDA ..exe
-
Size
135KB
-
MD5
a2d70fbab5181a509369d96b682fc641
-
SHA1
22afcdc180400c4d2b9e5a6db2b8a26bff54dd38
-
SHA256
8aed681ad8d660257c10d2f0e85ae673184055a341901643f27afc38e5ef8473
-
SHA512
219c6e7e88004fad9f4392be9a852c58fc43b7f6900e40370991427f37eaea5c18f48d2954f9479dde8bcb787345f4e292d5620add8224aec4d93d7968820b83
-
SSDEEP
1536:URLRDTAC1CMoR1CqabJWt7AQFYMGhw1ScCD28v2Vv428fmvxOuw03h9VC:URdV1CMoiqadTQFBGhw1ED28+94hGw
-
Async RAT payload
-
Suspicious use of SetThreadContext
-
-
-
Target
1 NOTIFICACION DEMANDA/Register.dll
-
Size
1.0MB
-
MD5
dd001e7a2f751f6c9e8c40e23307d102
-
SHA1
22fdeab3d891334e2e27d970b3a5680d45cb3371
-
SHA256
e2b66236119bfea1571f423a721b1c4495b2363a0af83b8ec2ea728b4fdd7d7a
-
SHA512
ee9591e952028aab264ed6fa51369bb5c8d7aee4eaf735fd2f78b4559e2d07791d4d9777478d93be9de8952fa70105d9c431a48d380eebe637138fa188d7aae7
-
SSDEEP
24576:a0RdvjwJ4ZCWQufs54Quz27j7BS2Nv+4BT8+uCI:bDhTzAj7pXT3S
Score1/10 -
-
-
Target
1 NOTIFICACION DEMANDA/rtl120.bpl
-
Size
1.1MB
-
MD5
adf82ed333fb5567f8097c7235b0e17f
-
SHA1
e6ccaf016fc45edcdadeb40da64c207ddb33859f
-
SHA256
d6dd7a4f46f2cfde9c4eb9463b79d5ff90fc690da14672ba1da39708ee1b9b50
-
SHA512
2253c7b51317a3b5734025b6c7639105dbc81c340703718d679a00c13d40dd74ccaba1f6d04b21ee440f19e82ba680aa4b2a6a75c618aed91bd85a132be9fc92
-
SSDEEP
24576:GbhVoNWbA1m6z1hGaMopv3RdaK6IPFf0DtDN9Tox0gc:vtQZPTtgc
Score1/10 -
-
-
Target
1 NOTIFICACION DEMANDA/vcl120.bpl
-
Size
1.9MB
-
MD5
c594d746ff6c99d140b5e8da97f12fd4
-
SHA1
f21742707c5f3fee776f98641f36bd755e24a7b0
-
SHA256
572edb7d630e9b03f93bd15135d2ca360176c1232051293663ec5b75c2428aec
-
SHA512
33b9902b2cf1154d850779cd012c0285882e158b9d1422c54ea9400ca348686773b6bacb760171060d1a0e620f8ff4a26ecd889dea3c454e8fc5fa59b173832b
-
SSDEEP
24576:j2gekcIlYas4GaAKBTZTkZbJ7YBRSjr2WLPcgjzTGlyz6F:jRvzfZT3XSmqcOTGc+F
Score1/10 -