Behavioral task
behavioral1
Sample
6e1ff6d66eb2c823157a3f0211d7b4dce41e778adb1936ce2dffa0e08c934f12.exe
Resource
win10v2004-20240508-en
General
-
Target
6e1ff6d66eb2c823157a3f0211d7b4dce41e778adb1936ce2dffa0e08c934f12
-
Size
45KB
-
MD5
6b0b8eb689573a0cbd1597e249fc4606
-
SHA1
117f03851e5678023af00203484abc528f805a1f
-
SHA256
6e1ff6d66eb2c823157a3f0211d7b4dce41e778adb1936ce2dffa0e08c934f12
-
SHA512
6080efeb93ed7770a93cd2aec6360f25017b800ecc5da73243149b142960920dcdaeca149fd47d8b15b57597b751c4b67ad97934bf9c2ca905dc6d3de0fe183f
-
SSDEEP
768:mu/dRTUo0HQbWUnmjSmo2qMwKjPGaG6PIyzjbFgX3ieFfu88+BDZyx:mu/dRTUPE2kKTkDy3bCXS4hdyx
Malware Config
Extracted
asyncrat
0.5.8
Default
172.105.121.169:6606
172.105.121.169:7707
172.105.121.169:8808
zHzb7obLOOj8
-
delay
3
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
6e1ff6d66eb2c823157a3f0211d7b4dce41e778adb1936ce2dffa0e08c934f12.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ