General
-
Target
DriverX11.exe
-
Size
45KB
-
MD5
d0c2b954f9e154b960c16b8c8d6ff8a3
-
SHA1
fe64f5d84baa760d01fe89a6850d3d6b1858fb8d
-
SHA256
d384798424a3f0383bba222d070951f9ff5185358e6ff0f29bb6fa364a13c928
-
SHA512
b0f101795c6032101d99bc3d9be83c01e2778d591949a5ae8b4f8396bd426043cdccd4746e510169c1cdc09d654cf3dfa71d6acee7438a675ba9c78e4204ad42
-
SSDEEP
768:Xues1TYQZ3VWU1Dmhbvmo2qj3KjGKG6PIyzjbFgX3i+CZSBFuDE1pdBmyviBDZPx:Xues1TYiwhN2yKYDy3bCXS+CZSBFAspk
Malware Config
Extracted
asyncrat
0.5.7B
DriverX11
127.0.0.1:6606
127.0.0.1:7707
127.0.0.1:8808
127.0.0.1:1604
88.248.18.120:6606
88.248.18.120:7707
88.248.18.120:8808
88.248.18.120:1604
DriverX11
-
delay
3
-
install
true
-
install_file
DriverX11.exe
-
install_folder
%AppData%
Signatures
Files
-
DriverX11.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ