Analysis
-
max time kernel
173s -
max time network
196s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
02/04/2024, 11:27
Behavioral task
behavioral1
Sample
8579bd550e62d5c01e34f4fefc627374d7598d62aed57dda018ae2804b1219fb.exe
Resource
win7-20240221-en
1 signatures
150 seconds
General
-
Target
8579bd550e62d5c01e34f4fefc627374d7598d62aed57dda018ae2804b1219fb.exe
-
Size
63KB
-
MD5
b87d31f518b16e93556670d5ba517906
-
SHA1
eb583edd8fd4459a64a8e2a5489345447acb89e8
-
SHA256
8579bd550e62d5c01e34f4fefc627374d7598d62aed57dda018ae2804b1219fb
-
SHA512
bcb3a21ca840da0865410ae8a42f7181b777a64bf0faa97d0623f9c21478c5bd910cbd11ec03c9b4d5ef4b9519952399586c53fcfe8b314ac190d6d43efe6c99
-
SSDEEP
1536:TmImx6tX2kNff4sKu+UYFAQzq7bwAPJVSLgprPlTGlx:Tm9x6tmkN7Ku+UYFAQzq7bwkSLgpdmx
Malware Config
Extracted
Family
asyncrat
Version
| CRACKED BY https://t.me/xworm_v2
Botnet
ABRIL
C2
winscapmarzo.duckdns.org:9003
Mutex
AsyncMutex_6SI8OkPnk
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
aes.plain