General
- Target Dls Game Update.exe
- Size 193KB
- Sample260710-mcq22aav2z
- SHA256 6629a8f1a34c98b93c42120c1b2d75866e0804de42055f0cca1e9e6cc4b5313f
- MD5 fcfb8eb400fd49276e69817f422b891a
- SHA1 b2126e216683b8ae29a84dd9d1f8424a2ba876fd
- SHA512 a46171c792d9ffcb254596e2ac283baff75dbcaf05a6bdf9a3f703e3fe08bc5a14c86cb48d840dcb1ba11af8ffcf1a9dbd61af52f5c5edd8fa8d558c2d4d991c
- SSDEEP 6144:/uAAJU+3bfwdFtnPqk14X+Q6WGxzY8xOG:/7+sv5vSA/
- TLSH T1B614071E37CD1306C9A9AAF088EB02934F4E7FE6D7D6CA42DF36311A45321A0947F959
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Dls Game Update.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
Dls Game Update.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
asyncrat
Version
-
0.5.8
Botnet
-
Default
C2
-
dls.ru.com:80
-
dls.ru.com:443
Mutex
-
YKuGf7gYQAtB
Attributes
-
delay
3
-
install
true
-
install_file
GameUpdate.exe
-
install_folder
%AppData%
aes.plain
Targets
-
- Target Dls Game Update.exe
- Size 193KB
- SHA256 6629a8f1a34c98b93c42120c1b2d75866e0804de42055f0cca1e9e6cc4b5313f
- MD5 fcfb8eb400fd49276e69817f422b891a
- SHA1 b2126e216683b8ae29a84dd9d1f8424a2ba876fd
- SHA512 a46171c792d9ffcb254596e2ac283baff75dbcaf05a6bdf9a3f703e3fe08bc5a14c86cb48d840dcb1ba11af8ffcf1a9dbd61af52f5c5edd8fa8d558c2d4d991c
- SSDEEP 6144:/uAAJU+3bfwdFtnPqk14X+Q6WGxzY8xOG:/7+sv5vSA/
- TLSH T1B614071E37CD1306C9A9AAF088EB02934F4E7FE6D7D6CA42DF36311A45321A0947F959
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Async RAT payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE