Behavioral task
behavioral1
Sample
5a7a57bf86880d83e4b6d67b6f44aa207a2db578588b747f4b6889969ebf4bae.exe
Resource
win7-20240903-en
General
-
Target
5a7a57bf86880d83e4b6d67b6f44aa207a2db578588b747f4b6889969ebf4bae.exe
-
Size
63KB
-
MD5
d99100134f704307cc057ae5e133c43b
-
SHA1
1708014b34a83e3d9694e84a78cfe23246fc7af9
-
SHA256
5a7a57bf86880d83e4b6d67b6f44aa207a2db578588b747f4b6889969ebf4bae
-
SHA512
64253ddba1cbfc710ba29d65197c2cf1706236bea2016b379e8823eb074aba1f3d4eaae6e9db939c726653756a93ff0473df25fa288d9375389e1dba85f302b6
-
SSDEEP
1536:3mImx6tX2kNff4sKu+UYFDGXw5bfAPMsXeglmg7rPlTGZx:3m9x6tmkN7Ku+UYFDGXw5bfYf3dix
Malware Config
Extracted
asyncrat
| CRACKED BY https://t.me/xworm_v2
Default
envio122344.duckdns.org:3030
AsyncMutex_6SI8OkPnk
-
delay
3
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
5a7a57bf86880d83e4b6d67b6f44aa207a2db578588b747f4b6889969ebf4bae.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ