General
-
Target
2432d3c26f9cc527403a4fc1f6a7d8a9e8646cc220660fa408cf8613de7b7001
-
Size
48KB
-
Sample
241117-s396gstakd
-
MD5
cf34ddd4811d4dc055b8d5cd133af1fc
-
SHA1
cdb3c5623ed5c9732b1d49a43e61873d86ea87b3
-
SHA256
2432d3c26f9cc527403a4fc1f6a7d8a9e8646cc220660fa408cf8613de7b7001
-
SHA512
2537eff86dcf84862257e90631192c3b2af4077e54343143a1ada14c40c37a31492877f33ffc12b0505eede1972f4fb986d4e672b53397a96e447b281f17db8b
-
SSDEEP
768:SuwpFTAY3IQWUe9jqmo2qLEhVDBNwGqrFPIuY29RzTw0bPb9s4RVy5zPCAuBDZog:SuwpFTA4/2/DYGLuY2LbPps4OtC/dog
Behavioral task
behavioral1
Sample
2432d3c26f9cc527403a4fc1f6a7d8a9e8646cc220660fa408cf8613de7b7001.exe
Resource
win7-20240903-en
Malware Config
Extracted
asyncrat
0.5.8
Default
mtf.wiki:6606
mtf.wiki:7707
mtf.wiki:8808
5fMCOVMxE37C
-
delay
3
-
install
true
-
install_file
mtfwiki.exe
-
install_folder
%AppData%
Targets
-
-
Target
2432d3c26f9cc527403a4fc1f6a7d8a9e8646cc220660fa408cf8613de7b7001
-
Size
48KB
-
MD5
cf34ddd4811d4dc055b8d5cd133af1fc
-
SHA1
cdb3c5623ed5c9732b1d49a43e61873d86ea87b3
-
SHA256
2432d3c26f9cc527403a4fc1f6a7d8a9e8646cc220660fa408cf8613de7b7001
-
SHA512
2537eff86dcf84862257e90631192c3b2af4077e54343143a1ada14c40c37a31492877f33ffc12b0505eede1972f4fb986d4e672b53397a96e447b281f17db8b
-
SSDEEP
768:SuwpFTAY3IQWUe9jqmo2qLEhVDBNwGqrFPIuY29RzTw0bPb9s4RVy5zPCAuBDZog:SuwpFTA4/2/DYGLuY2LbPps4OtC/dog
-
Asyncrat family
-
Async RAT payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-