General
-
Target
56c7225d39aa7d65908e596fe7997fc3c5ad97fb9b528f304dae5c1664df7042.ps1
-
Size
453KB
-
Sample
250128-qg59assncj
-
MD5
8e5f4812ecfa5fb1dbb565399b7b7973
-
SHA1
da8c4792a55bc92a2df915dffc0806d3fd69281d
-
SHA256
56c7225d39aa7d65908e596fe7997fc3c5ad97fb9b528f304dae5c1664df7042
-
SHA512
07aab920946875f25609a3562feb031245dfb6257c3083030cdf66fd798d78a5e55f3ebf41f2b21838bdbe7f0a49aed17891910d02fd87af504bdb7790455415
-
SSDEEP
1536:z5dW/z20+u4dXNR8WrlDnjDT2ybMVwO8zNdEunygsmj+oN8NGHbEh4WMx+m6y3x9:z7E+NPVFL2bUCUrNlKomLJVlCsspixGx
Static task
static1
Behavioral task
behavioral1
Sample
56c7225d39aa7d65908e596fe7997fc3c5ad97fb9b528f304dae5c1664df7042.ps1
Resource
win7-20240708-en
Malware Config
Extracted
asyncrat
AWS | 3Losh
00000001
81.10.39.58:7077
AsyncMutex_alosh
-
delay
3
-
install
false
-
install_folder
%AppData%
Targets
-
-
Target
56c7225d39aa7d65908e596fe7997fc3c5ad97fb9b528f304dae5c1664df7042.ps1
-
Size
453KB
-
MD5
8e5f4812ecfa5fb1dbb565399b7b7973
-
SHA1
da8c4792a55bc92a2df915dffc0806d3fd69281d
-
SHA256
56c7225d39aa7d65908e596fe7997fc3c5ad97fb9b528f304dae5c1664df7042
-
SHA512
07aab920946875f25609a3562feb031245dfb6257c3083030cdf66fd798d78a5e55f3ebf41f2b21838bdbe7f0a49aed17891910d02fd87af504bdb7790455415
-
SSDEEP
1536:z5dW/z20+u4dXNR8WrlDnjDT2ybMVwO8zNdEunygsmj+oN8NGHbEh4WMx+m6y3x9:z7E+NPVFL2bUCUrNlKomLJVlCsspixGx
-
Asyncrat family
-
Suspicious use of SetThreadContext
-