General
-
Target
ASYNCCOPY.rbxm.exe
-
Size
15.6MB
-
Sample
240306-txd2jadc5x
-
MD5
9b1c91dd477e2c6c301b22f533b009e2
-
SHA1
5120994c7fc731d900bead2cc940483b5906c31f
-
SHA256
c2ca0b70f11163ad1853569a945165f6e1123b1943817715c375e91042b2a064
-
SHA512
f361d07a1816a23544c900f3944c7fa13a0c050947dfdb3877cd385a66e04e563d614764e58c82d34248ebf3a7eb6ce2972b9b0786d981ae596de35ce979f866
-
SSDEEP
393216:9o9Ddnnx89uxfBh2Jp5M/urEUWjPCEhM1toymWX8Wjs+da:i9ZnxGuvhNdbqh1eymJes+da
Behavioral task
behavioral1
Sample
ASYNCCOPY.rbxm.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ASYNCCOPY.rbxm.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
ASYNCCOPY.rbxm.exe
-
Size
15.6MB
-
MD5
9b1c91dd477e2c6c301b22f533b009e2
-
SHA1
5120994c7fc731d900bead2cc940483b5906c31f
-
SHA256
c2ca0b70f11163ad1853569a945165f6e1123b1943817715c375e91042b2a064
-
SHA512
f361d07a1816a23544c900f3944c7fa13a0c050947dfdb3877cd385a66e04e563d614764e58c82d34248ebf3a7eb6ce2972b9b0786d981ae596de35ce979f866
-
SSDEEP
393216:9o9Ddnnx89uxfBh2Jp5M/urEUWjPCEhM1toymWX8Wjs+da:i9ZnxGuvhNdbqh1eymJes+da
Score7/10-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-