General
-
Target
Notifica Demanda Ref. 25421208-2024 Admite Juzgado Civil.exe
-
Size
2.0MB
-
Sample
241101-rjnmpszlgs
-
MD5
3d688bdc32ca1df6570115284247a661
-
SHA1
9e65416d36b4c54f28be49b9b88846a426111aa0
-
SHA256
6804e81b25e4ce4a13a794265d81f17e975119f0298f8bc1bab6e32ef68e96ed
-
SHA512
3b41c9fe21a3973198fe2d4f58f153f2113da861892557b5cdaf7ead410cf48702946422873a90260ac9f6ab3bd17e5d9d9b3329c7fd0a0bc026d3c181f9cc91
-
SSDEEP
49152:2S2EcnQUXj6SELV6HKcnkkdK9lQJhXfpCMmydLw9d5Oeqlt/IdMWRtpiFTm02t2m:oXV5gdswN/CjKb
Static task
static1
Behavioral task
behavioral1
Sample
Notifica Demanda Ref. 25421208-2024 Admite Juzgado Civil.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Notifica Demanda Ref. 25421208-2024 Admite Juzgado Civil.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
asyncrat
1.0.7
OCTU30
mjjhfyftuf.duckdns.org:8010
DcRatMutex_qwqdanchun
-
delay
1
-
install
false
-
install_folder
%AppData%
Targets
-
-
Target
Notifica Demanda Ref. 25421208-2024 Admite Juzgado Civil.exe
-
Size
2.0MB
-
MD5
3d688bdc32ca1df6570115284247a661
-
SHA1
9e65416d36b4c54f28be49b9b88846a426111aa0
-
SHA256
6804e81b25e4ce4a13a794265d81f17e975119f0298f8bc1bab6e32ef68e96ed
-
SHA512
3b41c9fe21a3973198fe2d4f58f153f2113da861892557b5cdaf7ead410cf48702946422873a90260ac9f6ab3bd17e5d9d9b3329c7fd0a0bc026d3c181f9cc91
-
SSDEEP
49152:2S2EcnQUXj6SELV6HKcnkkdK9lQJhXfpCMmydLw9d5Oeqlt/IdMWRtpiFTm02t2m:oXV5gdswN/CjKb
Score10/10-
Asyncrat family
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-