General
-
Target
5f451158d6d65399d8abf13f6a6d52bb42529c8b99ef5d2d7a6eb209ad532dcc
-
Size
595KB
-
Sample
250415-yh66zswwdy
-
MD5
9d1e4ea78cdfa3dd79f3c7c1bd2233f7
-
SHA1
37abe3fdfb4c6b91c142d50f367d1509a43dac7e
-
SHA256
5f451158d6d65399d8abf13f6a6d52bb42529c8b99ef5d2d7a6eb209ad532dcc
-
SHA512
ed5e880ba7ebff3375e4839c9b5044988ecea3604fbebf9b3a6fe605ecdc5f4c4758aea7e4e714e0d62b7bfb51053b5dd653cfc301ffc12943d7a9a5f244866d
-
SSDEEP
1536:JuETKT0cE2/sd9TZ3a3bfAYTo6ZZdOykMbIqvzKz8DvvOdr/:JuE2T0cE2et3a3bfdT3/gcz9DvvOdr/
Behavioral task
behavioral1
Sample
5f451158d6d65399d8abf13f6a6d52bb42529c8b99ef5d2d7a6eb209ad532dcc.exe
Resource
win10v2004-20250314-en
Malware Config
Extracted
asyncrat
0.5.8
Default
127.0.0.1:6606
127.0.0.1:7707
127.0.0.1:8808
5bGuu0UYsEiy
-
delay
3
-
install
true
-
install_file
powerhouse.exe
-
install_folder
%AppData%
Targets
-
-
Target
5f451158d6d65399d8abf13f6a6d52bb42529c8b99ef5d2d7a6eb209ad532dcc
-
Size
595KB
-
MD5
9d1e4ea78cdfa3dd79f3c7c1bd2233f7
-
SHA1
37abe3fdfb4c6b91c142d50f367d1509a43dac7e
-
SHA256
5f451158d6d65399d8abf13f6a6d52bb42529c8b99ef5d2d7a6eb209ad532dcc
-
SHA512
ed5e880ba7ebff3375e4839c9b5044988ecea3604fbebf9b3a6fe605ecdc5f4c4758aea7e4e714e0d62b7bfb51053b5dd653cfc301ffc12943d7a9a5f244866d
-
SSDEEP
1536:JuETKT0cE2/sd9TZ3a3bfAYTo6ZZdOykMbIqvzKz8DvvOdr/:JuE2T0cE2et3a3bfdT3/gcz9DvvOdr/
-
Asyncrat family
-
Async RAT payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-