General
- Target d9139f14adb853c8793f7067ae8f5bbf8d00e9382f7d4b33f9161d4b4053a3a8
- Size 45KB
- Sample260702-s92spahs2t
- SHA256 d9139f14adb853c8793f7067ae8f5bbf8d00e9382f7d4b33f9161d4b4053a3a8
- MD5 7e449e31f832de950802ef0e2b13ea9a
- SHA1 fa5b87c6fdab653e5b496f9b2a01de34714f21ed
- SHA512 acb07e694dd387f2e865d07dc82bfa0f99ec3ea606f1ef2d332d345793876c2798d953fa18d64b9f3d5ae189c870db57e8bb4aeb6d854f92f883000a8e0bf972
- SSDEEP 768:MuBGJTP0BQ0UWUWHaimo2qVJpt0CCM+d4CvS8PIkXjbSgX3iusG4xUXnOU2iyB7G:MuBGJTPho2Q/CFWBkzbVXS+4xUXShdEx
- TLSH T1AD233B0037D8C12BF2BE4B78A9F26145867AF5737603D64E1CC451DB5B23FC68A42AE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
d9139f14adb853c8793f7067ae8f5bbf8d00e9382f7d4b33f9161d4b4053a3a8.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
d9139f14adb853c8793f7067ae8f5bbf8d00e9382f7d4b33f9161d4b4053a3a8.exe
Resource
win11ltsc2024-20260629-en
Malware Config
Extracted
-
asyncrat
-
0.5.8
-
Default
-
vida-nova-design.com:80
-
vida-nova-design.com:22
-
vida-nova-design.com:8080
-
vida-nova-design.com:8880
-
vida-nova-design.com:2052
-
vida-nova-design.com:2082
-
vida-nova-design.com:2086
-
vida-nova-design.com:2095
-
vida-nova-design.com:443
-
vida-nova-design.com:2053
-
vida-nova-design.com:2083
-
vida-nova-design.com:2087
-
vida-nova-design.com:2096
-
vida-nova-design.com:8443
-
www.vida-nova-design.com:80
-
www.vida-nova-design.com:22
-
www.vida-nova-design.com:8080
-
www.vida-nova-design.com:8880
-
www.vida-nova-design.com:2052
-
www.vida-nova-design.com:2082
-
www.vida-nova-design.com:2086
-
www.vida-nova-design.com:2095
-
www.vida-nova-design.com:443
-
www.vida-nova-design.com:2053
-
www.vida-nova-design.com:2083
-
www.vida-nova-design.com:2087
-
www.vida-nova-design.com:2096
-
www.vida-nova-design.com:8443
-
malware.vida-nova-design.com:80
-
malware.vida-nova-design.com:22
-
malware.vida-nova-design.com:8080
-
malware.vida-nova-design.com:8880
-
malware.vida-nova-design.com:2052
-
malware.vida-nova-design.com:2082
-
malware.vida-nova-design.com:2086
-
malware.vida-nova-design.com:2095
-
malware.vida-nova-design.com:443
-
malware.vida-nova-design.com:2053
-
malware.vida-nova-design.com:2083
-
malware.vida-nova-design.com:2087
-
malware.vida-nova-design.com:2096
-
malware.vida-nova-design.com:8443
-
6Lvq2mTFm7GR
-
delay
0
-
install
true
-
install_file
w2mb.exe
-
install_folder
%AppData%
Targets
-
- Target d9139f14adb853c8793f7067ae8f5bbf8d00e9382f7d4b33f9161d4b4053a3a8
- Size 45KB
- SHA256 d9139f14adb853c8793f7067ae8f5bbf8d00e9382f7d4b33f9161d4b4053a3a8
- MD5 7e449e31f832de950802ef0e2b13ea9a
- SHA1 fa5b87c6fdab653e5b496f9b2a01de34714f21ed
- SHA512 acb07e694dd387f2e865d07dc82bfa0f99ec3ea606f1ef2d332d345793876c2798d953fa18d64b9f3d5ae189c870db57e8bb4aeb6d854f92f883000a8e0bf972
- SSDEEP 768:MuBGJTP0BQ0UWUWHaimo2qVJpt0CCM+d4CvS8PIkXjbSgX3iusG4xUXnOU2iyB7G:MuBGJTPho2Q/CFWBkzbVXS+4xUXShdEx
- TLSH T1AD233B0037D8C12BF2BE4B78A9F26145867AF5737603D64E1CC451DB5B23FC68A42AE9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Async RAT payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE