General
-
Target
Fakz.zip
-
Size
22KB
-
Sample
241130-171fvaxkfx
-
MD5
1ec66394ed0030c48d10196ccc498c6e
-
SHA1
1c89fd722bd1be31672a1aba4bfcb09354729917
-
SHA256
54cff1f1f65f87805c94865727bdd49425ac64a1f9d9d3b758e933e5928354d8
-
SHA512
4615e8ccbe6aba4d6f2ed436c7e061bb962100c7367992ac1105c9ca6de609c80e844969459b035a499f764bf322a3629bcc8d2f2963166a794c217c2f8e2ba9
-
SSDEEP
384:NE6hhodYWhY1XXH92vjHj8HpUsoanhetSNSabWfjdfpaiWO0+JH8xTcCqT63t:NlqY1n0rHjMproanhWmKfZfpapp+JH8p
Behavioral task
behavioral1
Sample
Fakz.zip
Resource
win7-20240903-en
Malware Config
Extracted
asyncrat
0.5.8
Default
127.0.0.1:6606
127.0.0.1:7707
127.0.0.1:8808
GhA6jcKb6Xjr
-
delay
3
-
install
false
-
install_folder
%AppData%
Targets
-
-
Target
Fakz.zip
-
Size
22KB
-
MD5
1ec66394ed0030c48d10196ccc498c6e
-
SHA1
1c89fd722bd1be31672a1aba4bfcb09354729917
-
SHA256
54cff1f1f65f87805c94865727bdd49425ac64a1f9d9d3b758e933e5928354d8
-
SHA512
4615e8ccbe6aba4d6f2ed436c7e061bb962100c7367992ac1105c9ca6de609c80e844969459b035a499f764bf322a3629bcc8d2f2963166a794c217c2f8e2ba9
-
SSDEEP
384:NE6hhodYWhY1XXH92vjHj8HpUsoanhetSNSabWfjdfpaiWO0+JH8xTcCqT63t:NlqY1n0rHjMproanhWmKfZfpapp+JH8p
-
Asyncrat family
-
Async RAT payload
-
Executes dropped EXE
-
Drops file in System32 directory
-