Overview

overview

10

Static

static

1

001-NOTIFI...AL.exe

windows7-x64

10

001-NOTIFI...AL.exe

windows10-2004-x64

10

001-NOTIFI...64.exe

windows7-x64

001-NOTIFI...64.exe

windows10-2004-x64

001-NOTIFI....0.dll

windows7-x64

1

001-NOTIFI....0.dll

windows10-2004-x64

3

001-NOTIFI....0.dll

windows7-x64

1

001-NOTIFI....0.dll

windows10-2004-x64

3

001-NOTIFI....0.dll

windows7-x64

1

001-NOTIFI....0.dll

windows10-2004-x64

3

001-NOTIFI....0.dll

windows7-x64

1

001-NOTIFI....0.dll

windows10-2004-x64

3

001-NOTIFI...nv.dll

windows7-x64

3

001-NOTIFI...nv.dll

windows10-2004-x64

3

001-NOTIFI...tl.dll

windows7-x64

1

001-NOTIFI...tl.dll

windows10-2004-x64

3

001-NOTIFI...o.html

windows7-x64

1

001-NOTIFI...o.html

windows10-2004-x64

1

001-NOTIFI...ls.dll

windows7-x64

1

001-NOTIFI...ls.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    534d1e3d7e1b3da44c4a24e67d2467ed56ac5644d8f92288b19ac4be7853c5f3.zip

  • Size

    3.4MB

  • Sample

    240420-lhs8xade85

  • MD5

    a3012ac7efc1a6cca38bc8deb861696e

  • SHA1

    bedf0e6da6b6abaab431bb0a418922039f817a3e

  • SHA256

    534d1e3d7e1b3da44c4a24e67d2467ed56ac5644d8f92288b19ac4be7853c5f3

  • SHA512

    d9c4eacd008f90e4194c09c019369a3b902bb3853554609a8e4a346cd2788241ea414f53c1632a9701ec3c639adea08c451be914c305ad0ff0976b7d5e9a161f

  • SSDEEP

    98304:+7itWB5W5aqeRE+uw1rTb6zfSr5remX4xXRs6vlG:+7qWBCaVCwazarUoertG

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

| CRACKED BY https://t.me/xworm_v2

Botnet

Default

C2

enviofinal.kozow.com:5051

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_file

    AnsyFelix

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      001-NOTIFICACION JUDICIAL AUTO DE IMPUTACION POR INCUMPLIMIENTO FISCAL/001-NOTIFICACION JUDICIAL.exe

    • Size

      63KB

    • MD5

      ae224c5e196ff381836c9e95deebb7d5

    • SHA1

      910446a2a0f4e53307b6fdeb1a3e236c929e2ef4

    • SHA256

      bf933ccf86c55fc328e343b55dbf2e8ebd528e8a0a54f8f659cd0d4b4f261f26

    • SHA512

      f845dbb13b04f76b6823bec48e1c47f96bcbd6d02a834c8b128ac750fe338b53f775ee2a8784e8c443d49dfcb918c5b9d59b5492a1fe18743b8ba65b7d12514c

    • SSDEEP

      1536:Wio8DVyYs7JZT0uPXn8OS6sIe3ekT5Z240jSZk:WkhyYIJZT0uPXn8OdsIe3c4Ql

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      001-NOTIFICACION JUDICIAL AUTO DE IMPUTACION POR INCUMPLIMIENTO FISCAL/WINRAR/7z2301-arm64.exe

    • Size

      1.5MB

    • MD5

      3c5917f4da614ef892f055c697744b77

    • SHA1

      be65c2ea6119c04945c66b13413892f2bb03d9a7

    • SHA256

      6fa4cb35cbebb0a46b8bbc22d1686a340e183c1f875d8b714efdc39af93debda

    • SHA512

      f5278a40fcbd0f803c8671c87b0a68c0ccc60a0770c1247eab60fe5a1c9d96bd182d5f4980f7f77791c570db092cf444e2077be59ace214a407ebc8541f69532

    • SSDEEP

      24576:R27gq8AF9zyUW/MuwewULx3waJt4tqFA8r/Df/uFSn12l4LmK3jQ4Z1:kF3W/MuwewAxAaJt4tvG/Df/uFxlumMz

    Score
    1/10
    behavioral3behavioral4

    • Target

      001-NOTIFICACION JUDICIAL AUTO DE IMPUTACION POR INCUMPLIMIENTO FISCAL/glib-2.0.dll

    • Size

      1.0MB

    • MD5

      132b0e16e2add7808e17f113a7724aeb

    • SHA1

      aa7e3e20b6eaa1c5db5b4a2ca060be71ba3ef8c1

    • SHA256

      64144483049fed3406f23d7028388b687a8e4c4d822171b18a295f70ccf220e0

    • SHA512

      4d91e249ca8609d1ec13ad526532a1d6e6141a1828fce25ac0e7319c24dc354773a9e09a58ecd62f57035b39a225b5d77377749af2cf2be9da01b159879db39d

    • SSDEEP

      24576:PekMj5RU/KFHOTHRMQMa62jcS/KPDIj5d0HlKQrVmPQk:PekMjoKsRMQ+S/iDIj5d0FPVmYk

    Score
    3/10
    behavioral5behavioral6

    • Target

      001-NOTIFICACION JUDICIAL AUTO DE IMPUTACION POR INCUMPLIMIENTO FISCAL/gmodule-2.0.dll

    • Size

      24KB

    • MD5

      b0a421b1534f3194132ec091780472d8

    • SHA1

      699b1edc2cb19a48999a52a62a57ffc0f48f1a78

    • SHA256

      2d6bc34b38bc0abf0c5e2f40e2513b4df47af57848534e011a76d4e974ad958b

    • SHA512

      ba74654843c5b0f94dfefbed81cbee4c5f360193ef8ea92836c712fbeada39fa8179a51f0849f6c4be23add1ced08f5e25f873c4b0e7533ae647fa2b19b83f98

    • SSDEEP

      384:3yCTiyTIlmltk6yvfEPLS9OeGYDVEiAhbJM8bDmnYPLm6HEGJqUHeMN6B:3yCWyTIlmltTQO87hB3QX/mz

    Score
    3/10
    behavioral7behavioral8

    • Target

      001-NOTIFICACION JUDICIAL AUTO DE IMPUTACION POR INCUMPLIMIENTO FISCAL/gobject-2.0.dll

    • Size

      281KB

    • MD5

      24a7a712160abc3f23f7410b18de85b8

    • SHA1

      a01c3e116b6496c9feaa2951f6f6633bb403c3a1

    • SHA256

      78dd76027e10c17824978db821777fcaa58d7cd5d5eb9d80d6ee817e26b18ab8

    • SHA512

      d1f14a7bd44e1fc9bfc61f0b751ee6e0677322807ce5621206eeef898bab6c71ef1464962b20dc50f706084e53281a0d4b6d9142c6c1170a1e0a5fe4b12171df

    • SSDEEP

      3072:2OoLt6w1bALJPPcGPXGHv5aHi9IdzMxtcZJPn4/3KLW6QgMFhQZhXMGSQQ8:qLt6w1byk+2H/c8YPn4SLWQMFhQZOQj

    Score
    3/10
    behavioral10behavioral9

    • Target

      001-NOTIFICACION JUDICIAL AUTO DE IMPUTACION POR INCUMPLIMIENTO FISCAL/gthread-2.0.dll

    • Size

      31KB

    • MD5

      78cf6611f6928a64b03a57fe218c3cd4

    • SHA1

      c3f167e719aa944af2e80941ac629d39cec22308

    • SHA256

      dbaad965702b89c371462e735dd925c694eda8d8557b280f7264bba992c0e698

    • SHA512

      5caf019a6b75ba0330b8d0b60d362201d4863c0f3d70d2a9c84b6dbea2027d09bc8a6433820f28a41d126c7aaa13dbe126b38dc5c6d14a67ddef402fed9d9b7c

    • SSDEEP

      384:Uwu65o6vunfhlfz2bWTQHaFZDGXoM6m2SNqslNkMgq4w8w/nYPLm6HEGJqUHeMYD:Uwfo6vITf3QHanSYM6pUmMDQw/R2Kf

    Score
    3/10
    behavioral11behavioral12

    • Target

      001-NOTIFICACION JUDICIAL AUTO DE IMPUTACION POR INCUMPLIMIENTO FISCAL/iconv.dll

    • Size

      1.1MB

    • MD5

      862dfc9bf209a46d6f4874614a6631cc

    • SHA1

      43216aae64df217cba009145b6f9ad5b97fe927a

    • SHA256

      84538f1aacebf9daad9fdb856611ab3d98a6d71c9ec79a8250eee694d2652a8b

    • SHA512

      b0611cd9ad441871cca62291913197257660390fa4ea8a26cb41dc343a8a27ae111762de40c6f50cae3e365d8891500fc6ad0571aa3cd3a77eb83d9d488d19a8

    • SSDEEP

      24576:JkfXHfBlcKu6Gavkg3Nyp+bbbf4IBAUZLYN:JIX/cKu6GaX824IBAUZLYN

    Score
    3/10
    behavioral13behavioral14

    • Target

      001-NOTIFICACION JUDICIAL AUTO DE IMPUTACION POR INCUMPLIMIENTO FISCAL/intl.dll

    • Size

      87KB

    • MD5

      d1a21e38593fddba8e51ed6bf7acf404

    • SHA1

      759f16325f0920933ac977909b7fe261e0e129e6

    • SHA256

      6a64c9cb0904ed48ce0d5cda137fcfd6dd463d84681436ca647b195aa2038a7e

    • SHA512

      3f4390603cd68d949eb938c1599503fb1cbb1b8250638e0985fad2f40f08d5e45ea4a8c149e44a50c6aa9077054387c48f71b53bf06b713ca1e73a3d5a6a6c2e

    • SSDEEP

      1536:R3P7SvYgvNf+ZSz6wHFK1XErzMfb2z/oMJtEZMGG3:RjGYgvNf+ZSzJlK1XErzMfb2z/oMbEOV

    Score
    3/10
    behavioral15behavioral16

    • Target

      001-NOTIFICACION JUDICIAL AUTO DE IMPUTACION POR INCUMPLIMIENTO FISCAL/peso.html

    • Size

      651KB

    • MD5

      f61ffc7e27ebe18640b2afcf5aa374bc

    • SHA1

      c2da7ed9170b8e956af3b9389146e4249c2706e9

    • SHA256

      82e81a2b13372371e7285d2c79bb6cfd03482fa2addfb87d04925babd09c9d04

    • SHA512

      a1f557f435aabd38b6a6dfdda5cfc33ba4ddf2bc1ab61b62288b4281f922f97337326dffd611b4ff60c76a0bd7945e862c2f7f3d73ae0938a18ece3549eba9f8

    • SSDEEP

      12288:kMYz6u9GZPRKcnM4kWWuC0lL6CT2PnETMNl3/qYXqYz1hQ3g8KPdeLCOPOge+k/H:RdDMKdT2fETM73/rF1hQQLoCek/Y4

    Score
    1/10
    behavioral17behavioral18

    • Target

      001-NOTIFICACION JUDICIAL AUTO DE IMPUTACION POR INCUMPLIMIENTO FISCAL/vmtools.dll

    • Size

      617KB

    • MD5

      65c3c2a741838474a592679cda346753

    • SHA1

      043d80766dd4e49d8dca6ac72b04e09b5491fdc9

    • SHA256

      4e5f2c54d9ecfe48999edfcce0de038948f8b20ff68e299c55d9a2d6f65713e8

    • SHA512

      e5d8b308586ffa914f46b6766217eb12ad759853d25108db06170b870d0e8947e2befabc2843f76cb864b0f0135a8f2163b7c93fe644b293789919d1d07c4079

    • SSDEEP

      12288:uxox5+Qg/YYhflIuPj6sya8/TfOMCEB/15/Cyz0NSwsIEmotaAJW:uCxg5/YYhfmXOdQ15/CyYNSXIE1tJW

    Score
    3/10
    behavioral19behavioral20

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks