General
-
Target
HomeBrewXSS.exe
-
Size
47KB
-
Sample
241002-hdde4ssarj
-
MD5
0d1a0f08224bb93658a44a322f8ba885
-
SHA1
918b7e6b2ac0f955f72a868cec8090535313a0d8
-
SHA256
b0f42cd37d2b43303ff4c3650b08874091e5befee8c8df1146ca938940d7c924
-
SHA512
7b99f32f2b83fa626448292628e1a166838113d3695bf41761d943409ba5374fcdf565eea4691819084e30a5864e54d36af096f4a7152545559d98c96a31687d
-
SSDEEP
768:CuACNTHkvSbWUnwKJmo2q7U+Nc2ILoPIsZmUkNO00bagzXayuwlYjmkmiEBDZkx:CuACNTHge2kILNsZmUkNO3bagDap6uyU
Behavioral task
behavioral1
Sample
HomeBrewXSS.exe
Resource
win7-20240903-en
Malware Config
Extracted
asyncrat
0.5.7B
Default
127.0.0.1:6606
127.0.0.1:7707
127.0.0.1:8808
AsyncMutex_6SI8OkPnk
-
delay
3
-
install
true
-
install_file
HomeBrewX_ServerSide.exe
-
install_folder
%AppData%
Targets
-
-
Target
HomeBrewXSS.exe
-
Size
47KB
-
MD5
0d1a0f08224bb93658a44a322f8ba885
-
SHA1
918b7e6b2ac0f955f72a868cec8090535313a0d8
-
SHA256
b0f42cd37d2b43303ff4c3650b08874091e5befee8c8df1146ca938940d7c924
-
SHA512
7b99f32f2b83fa626448292628e1a166838113d3695bf41761d943409ba5374fcdf565eea4691819084e30a5864e54d36af096f4a7152545559d98c96a31687d
-
SSDEEP
768:CuACNTHkvSbWUnwKJmo2q7U+Nc2ILoPIsZmUkNO00bagzXayuwlYjmkmiEBDZkx:CuACNTHge2kILNsZmUkNO3bagDap6uyU
-
Async RAT payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-