General
-
Target
Ui-Updater.exe
-
Size
63KB
-
Sample
241124-d33n3syjdj
-
MD5
d149276a9977e3789efbc394d2420479
-
SHA1
71649fa0d6fa99a590b5b3e50b82f4aa50592f1a
-
SHA256
266d369c706e77dc4af02a23e99c0c27ecb6aad8a44b9976255f04cc921ccec6
-
SHA512
596158d51d89d9ee2ce7cb773eec6b712bb62a91485cb46cf69e3818a3eccda3ab62a289a497fddb3b51b0e29811318d0a8dc5bd675b037c18b34d8359654e79
-
SSDEEP
1536:HeQPc9ynqdyp7jykr1RCYUbnh5McIuIdpqKmY7:HeDiXAYUbnfeGz
Malware Config
Extracted
asyncrat
Default
more-entered.gl.at.ply.gg:2000
-
delay
1
-
install
true
-
install_file
Windows.exe
-
install_folder
%AppData%
Targets
-
-
Target
Ui-Updater.exe
-
Size
63KB
-
MD5
d149276a9977e3789efbc394d2420479
-
SHA1
71649fa0d6fa99a590b5b3e50b82f4aa50592f1a
-
SHA256
266d369c706e77dc4af02a23e99c0c27ecb6aad8a44b9976255f04cc921ccec6
-
SHA512
596158d51d89d9ee2ce7cb773eec6b712bb62a91485cb46cf69e3818a3eccda3ab62a289a497fddb3b51b0e29811318d0a8dc5bd675b037c18b34d8359654e79
-
SSDEEP
1536:HeQPc9ynqdyp7jykr1RCYUbnh5McIuIdpqKmY7:HeDiXAYUbnfeGz
-
Asyncrat family
-
Async RAT payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-