General
-
Target
Image logger.exe
-
Size
63KB
-
Sample
240127-ee8qvsebfq
-
MD5
a90a62e71161a809edf4efae7e212986
-
SHA1
62664d843a065315842dc12c0b2e3bfeb4d94fb7
-
SHA256
cb0192bac32dea88f3745ff0bc459247413efa76958d3cd7a1a58ea80d6440ed
-
SHA512
a78147ca442c3d044917c1ef9bf25dc61505966c8d0bd308b372070ff056f2f1fc912096caceff44c9f42240a7eb9774721b3cad39e3c0061a1e238f96f80b58
-
SSDEEP
768:i+BAGkPhz/n78FoC8A+Xkqpeyr61urX1+T4uoSBGHmDbDTph0oX7gYBBB5MSu0dP:jq/bjn0tYUbJh97gYBBBxu0dpqKmY7
Malware Config
Extracted
asyncrat
Default
127.0.0.1:3232
ש贼u4VΙץjQPfL斯vWΔ
-
delay
1
-
install
true
-
install_file
tst.exe
-
install_folder
%AppData%
Targets
-
-
Target
Image logger.exe
-
Size
63KB
-
MD5
a90a62e71161a809edf4efae7e212986
-
SHA1
62664d843a065315842dc12c0b2e3bfeb4d94fb7
-
SHA256
cb0192bac32dea88f3745ff0bc459247413efa76958d3cd7a1a58ea80d6440ed
-
SHA512
a78147ca442c3d044917c1ef9bf25dc61505966c8d0bd308b372070ff056f2f1fc912096caceff44c9f42240a7eb9774721b3cad39e3c0061a1e238f96f80b58
-
SSDEEP
768:i+BAGkPhz/n78FoC8A+Xkqpeyr61urX1+T4uoSBGHmDbDTph0oX7gYBBB5MSu0dP:jq/bjn0tYUbJh97gYBBBxu0dpqKmY7
-
Async RAT payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-