General
-
Target
21b61d55d4619a2ca0a1893a1a18154260eb81c76d421e3a60e5596ef8c2ccca
-
Size
61KB
-
Sample
241225-zgjjzaxlan
-
MD5
2499d05e60a2aae9123f0f37d12ab1dd
-
SHA1
b24fe29c7cc5319fe508ea539567e4832c6890cf
-
SHA256
21b61d55d4619a2ca0a1893a1a18154260eb81c76d421e3a60e5596ef8c2ccca
-
SHA512
f5fbb29e6e99fd73250737dacc9b45409da600459d6a7c7ef6a02c508f31702e522f9eb5ca9d29ac7d1b59a024dbf66e4a869ea18e75e14c96523011fc1d0ca1
-
SSDEEP
1536:8F8JsI94/CcIAVBala3b7PSSD3pKFNEx+:m8JsZCcIAzala3b7NDQFNEE
Behavioral task
behavioral1
Sample
21b61d55d4619a2ca0a1893a1a18154260eb81c76d421e3a60e5596ef8c2ccca.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
21b61d55d4619a2ca0a1893a1a18154260eb81c76d421e3a60e5596ef8c2ccca
-
Size
61KB
-
MD5
2499d05e60a2aae9123f0f37d12ab1dd
-
SHA1
b24fe29c7cc5319fe508ea539567e4832c6890cf
-
SHA256
21b61d55d4619a2ca0a1893a1a18154260eb81c76d421e3a60e5596ef8c2ccca
-
SHA512
f5fbb29e6e99fd73250737dacc9b45409da600459d6a7c7ef6a02c508f31702e522f9eb5ca9d29ac7d1b59a024dbf66e4a869ea18e75e14c96523011fc1d0ca1
-
SSDEEP
1536:8F8JsI94/CcIAVBala3b7PSSD3pKFNEx+:m8JsZCcIAzala3b7NDQFNEE
-
Asyncrat family
-
Async RAT payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-