Asari-main.zip
- SHA256 8696c934e9a89f50f444e1ae59f10a374231ee07692eafdaa618df20f26b2523
Password
jandaia123
Overview
overview
3Static
static
3Asari-main.zip
windows10-2004-x64
1Asari-main.zip
windows11-ltsc_2024-x64
1Asari-main...ll.bat
windows10-2004-x64
3Asari-main...ll.bat
windows11-ltsc_2024-x64
3Asari-main/launch.py
windows10-2004-x64
3Asari-main/launch.py
windows11-ltsc_2024-x64
3Asari-main...13.pyc
windows10-2004-x64
3Asari-main...13.pyc
windows11-ltsc_2024-x64
3Asari-main...39.pyc
windows10-2004-x64
3Asari-main...39.pyc
windows11-ltsc_2024-x64
3Asari-main...run.py
windows10-2004-x64
3Asari-main...run.py
windows11-ltsc_2024-x64
3Asari-main...on.dll
windows10-2004-x64
1Asari-main...on.dll
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Asari-main.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Asari-main.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Asari-main/install.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
Asari-main/install.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
Asari-main/launch.py
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral6
Sample
Asari-main/launch.py
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral7
Sample
Asari-main/src/__pycache__/_run.cpython-313.pyc
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral8
Sample
Asari-main/src/__pycache__/_run.cpython-313.pyc
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral9
Sample
Asari-main/src/__pycache__/_run.cpython-39.pyc
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral10
Sample
Asari-main/src/__pycache__/_run.cpython-39.pyc
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral11
Sample
Asari-main/src/_run.py
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral12
Sample
Asari-main/src/_run.py
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral13
Sample
Asari-main/src/apollyon.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
Asari-main/src/apollyon.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target Asari-main.zip
- Size 53KB
- Sample260823-frjg6sshkf
- SHA256 8696c934e9a89f50f444e1ae59f10a374231ee07692eafdaa618df20f26b2523
- MD5 781c46b35f41e2a088f262b5e241d034
- SHA1 12c7916aa75df2e305dcc9bbdcefb1663356e920
- SHA512 514daf13d116e043c002db04d5053b3a37492e9f178a30932f13b08378de6d204c38c784e30eb09014781f29c332619a2a0c2866dace16115e8049a9fbe55f32
- SSDEEP 1536:1FPAKGCeHdhcrDKjJvGT2IAcOO7usI9/SN:DPPeHdhcrOjRGYcO/1/Q
- TLSH T1AD33F10B879EFBF9D591A334E95CF3AF4E121060170CC39854B8CB68AA4B1635B5768F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Asari-main/src/apollyon.pyd
File Explorer
-
Asari-main.zip.zip 53KB
-
Asari-main/README.md731B
-
Asari-main/install.bat27B
-
Asari-main/launch.py40B
-
Asari-main/requirements.txt19B
-
Asari-main/src/__pycache__/_run.cpython-313.pyc38KB
-
Asari-main/src/__pycache__/_run.cpython-39.pyc38KB
-
Asari-main/src/_run.py151KB
-
Asari-main/src/apollyon.pyd.dll 68KB
Asari-main/README.md
- SHA256 028740fffa89e2ee4795ab52c2e7d14f9e20f1315384838a56207f06a49900bf
- MD5 dfc55f747beb4a1fb8874624f70eda20
- SHA1 174ed709d47c5dfaeaedbfe3daa3d38aa54bb8c6
- SHA512 9dc24ea57cf63d68349a274e08d992aa8d63e68355895270805300f5d1ca85c6edb75fed744b1331aeb773a666564d57213fc686b75434071bd8dbe44b92fc72
- TLSH T18A0110F10004116A2B8B40056E4A73BFD623708CF6EA81C4E1E3D5FC5040192777A32A
- MD5 SHA1 SHA512 TLSH
Asari-main/install.bat
- SHA256 c2839d7d46b989a592de18e3bc87220c0c2c4dceb87a1c08f0478b455087f65b
- MD5 a778aa779bb233f00ddeeae4c052d42e
- SHA1 d6244713677e8f843c3f1f3084eb5c7d591d8278
- SHA512 493b8b8131f93ed7ef6d8b233ad4d4ae0ef3153e7dc2842ad78a7eb37ccadc68df6c7205fd624ab354c2b5c672d0a6f4d3ddc63cc59643ee67d168d8b7c68a1b
- MD5 SHA1 SHA512
Asari-main/launch.py
- SHA256 2b8018a80d991f382367f063ce73eedc0c3f839bf90307b85d6f75d6da4591c7
- MD5 23fd2e4e4f9e91791f52d6d90a8c176d
- SHA1 a90d3d57d0b33012102ccb85fcb3eb2e4c4ddcbc
- SHA512 6a3a6c757479245fe939788bda837b7f27ba9f889c94f2c8930a46a48262276741dd4a5b8eefea8d4a58d146e4f56e507f26dee66470a6e8b01df3a02fad14a0
- MD5 SHA1 SHA512
Asari-main/requirements.txt
- SHA256 76dd1167b12890b8b62c4b14194cd24efb3a03a84dec3fa0efdabaca8cda4067
- MD5 d1a0b8e846c0998fb29c42c46b2286eb
- SHA1 2b97565740088c262d411a0be6f62dce8b15e3f0
- SHA512 8e6ff6f83372f470e4dfa25d55dc940a597020aa41d4b69f389b87af5ac8e2fce205245a3d4e3a07ebb879608fe3605276bdf4ea7425b0b1510ac63ca5e53bcb
- MD5 SHA1 SHA512
Asari-main/src/__pycache__/_run.cpython-313.pyc
- SHA256 c6564b19463e001b1a6d1409e76806fdfdf8d0848b40504b1dbc36568b8eee4d
- MD5 6b2719dad9104ec00dbb3b388d5e3657
- SHA1 147b24969f400191d2d0d4b87ebce083ff35e5b1
- SHA512 3bd5cbfc655af3812f5f10b10439181e732353a6ea0cc56ded9d0c8ae7fd70f7d9412921357ac43abc8eb6ab92ddcee3ad845979526ed8649d7bc0b89ad3a6c8
- SSDEEP 384:nrDnUoCfCXkWtD6Uc+Nx7+P9W+Pj6SCp9uWeLnSLmN9b:fFCf740ulU9WUeZsbdb
- TLSH T1E90349475BCA5166BA0160AAE02510412007BDDAEBDE971DB962FC2FFC8BF454DC938F
- MD5 SHA1 SHA512 SSDEEP TLSH
Asari-main/src/__pycache__/_run.cpython-39.pyc
- SHA256 3b083bc82d7b2364bcf9f7bb414709186d71f5e70bf0f819ee4fc72aee610bd2
- MD5 ae141522d5c6b33fffd302de050e40b6
- SHA1 5794343b02261488af9add14832396f9fa3db2ab
- SHA512 13be7a6361418694d46afbc5fa7646049813b6e9b7b1020d583aa558f18cf71f0d2d8a37d7b18b9c757f0f750fcf2ee916216f6cc07a72b8d1d48154d7b2dc6f
- SSDEEP 384:KrDnUoCfCXkWtD6Uc+Nx7+P9W+Pj6SCp9uWeLnSLmNq:OFCf740ulU9WUeZsbK
- TLSH T18F0349475BCA5166BA0160AAE02510412007BDDAEBDE971DB962FC2FFC8BF454DC938F
- MD5 SHA1 SHA512 SSDEEP TLSH
Asari-main/src/_run.py
- SHA256 34259ea20bc720f10df897fdb25e87c1f1d62d29edcdb25c7ec427544ba81dee
- MD5 d8b6178e4dc3756ce756d717fb0fb7de
- SHA1 ae6ceb29e17845256e144d231a7912175782ab84
- SHA512 ff9a8d150d459381c5a0656e1364b1f8abc6087204cac84d4b04a375e90029e8b16cf71e05c125439d1f13aaa3e287aeb1c62c6328c4c9421b5d3952ce5cb81a
- SSDEEP 768:BaD9nnF0FfLvOhlXQDcaC8ADA9Zaz+FkQVD6/s6pD+5Hlfwyo7yYfaSC6sR0vsAn:BXDN8/yu/xyGmsAuXQNZvttZQqIg2k6/
- TLSH T1E2E351A8A317C1262FD34C4EEE827DB53EE3D973D8DAA90070953B0F44A973D4691B46
- MD5 SHA1 SHA512 SSDEEP TLSH
Asari-main/src/apollyon.pyd
- IMPHASH c7cb58577943b6d743ac92d8a96c2c10
- SHA256 65604427eecf0219c6128bc8b5d9fb8091ed794a378b4a15b021defa32c6bf0d
- MD5 4641031044570c1d8c04b1a6f08d3407
- SHA1 33a654898d4d0dfc1df9fcde60b4613b2c8f70f7
- SHA512 63aef43bc05ef4b0b1da98f1537f87848162ca83e1dc43b24f5efc22d7e27082f68e362c5c86a0ddb4b473071c5edfe7818cf9d7743f3d81c869256d449ef9de
- SSDEEP 768:I60ZCdISlPP6iTE0JoM+62F3JMtJV7jjfzIf4/WZkR9E5DqKuR333+t7Dh9iE76y:I6uCdpZPPE0GMh2RStn+5Z5DqC79CP
- TLSH T1F863286B5394009AE6F7907DC9335A06E371F4521720A7CF02A4C78E2F53BDA6ABDB41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
jandaia123
Minor OS version
0
Major OS version
6
Entry point
4944
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
python39
Py_GetVersion
PyObject_GetAttr
PyRun_StringFlags
_Py_NoneStruct
PyTuple_New
PySequence_Contains
PyDict_SetItemString
PyDict_Size
PyLong_FromLongLong
PyFrame_Type
PyFloat_FromDouble
PyExc_AttributeError
PyTuple_GetSlice
PyErr_SetString
PyErr_WriteUnraisable
PyObject_GetIter
PyNumber_Add
PyEval_EvalCodeEx
PyExc_ValueError
PyDict_Next
PyErr_Format
PyDict_Type
PyObject_RichCompare
PyTuple_Type
_Py_FalseStruct
PyCoro_Type
PyNumber_InPlaceAdd
PyFloat_Type
PyModule_NewObject
PyMethod_Type
PyLong_Type
PyType_IsSubtype
PyNumber_Subtract
PyUnicode_Join
PyExc_OverflowError
_Py_Dealloc
PyTuple_GetItem
PyImport_GetModuleDict
PyModule_GetDict
PyObject_Free
PyErr_ExceptionMatches
PyObject_GC_Del
PyObject_CallFunctionObjArgs
PyObject_ClearWeakRefs
PyCode_Type
PyObject_Not
PyUnicode_AsUTF8
PyUnicode_FromFormat
PyImport_AddModule
PyType_Ready
_PyGen_Send
PyErr_Clear
PyUnicode_Decode
PyCode_New
PyDict_SetItem
PyDict_New
PyUnicode_Type
PyObject_CallFinalizerFromDealloc
_PyDict_GetItem_KnownHash
PyNumber_Index
PyExc_StopIteration
PyList_Type
PyDict_GetItemString
PyObject_GetItem
PyObject_CallObject
PyModuleDef_Init
PyObject_GC_Track
PyBytes_FromStringAndSize
PyUnicode_Compare
_Py_NewReference
PyObject_IsSubclass
PyExc_TypeError
PyMem_Realloc
PyEval_GetBuiltins
PyObject_IsTrue
PyExc_NameError
PyUnicode_AsUTF8String
PyTuple_Pack
_PyUnicode_Ready
PyMem_Malloc
PyExc_IndexError
Py_EnterRecursiveCall
PyExc_ImportError
PyGen_Type
_Py_TrueStruct
PyArg_UnpackTuple
PyExc_SystemError
PyObject_SetItem
_PyObject_GC_New
PyTraceBack_Type
PyMethodDescr_Type
PyExc_GeneratorExit
PyEval_EvalFrameEx
PyUnicode_FromString
_PyType_Lookup
PyObject_Size
PyObject_Call
PyByteArray_Type
PyType_Type
PyUnicode_FromStringAndSize
_PyObject_GetDictPtr
PyInterpreterState_GetID
PyDict_GetItemWithError
PyErr_SetNone
PyObject_Hash
PyObject_GC_UnTrack
PyLong_FromLong
PyObject_SetAttrString
PyMethod_New
PyExc_RuntimeError
_PyThreadState_UncheckedGet
PyTraceBack_Here
PyObject_GenericGetAttr
PyLong_FromSsize_t
PyType_GetFlags
PyErr_Occurred
PyObject_SelfIter
PyErr_NormalizeException
PyImport_ImportModule
Py_LeaveRecursiveCall
PyExc_KeyError
_PyDict_SetItem_KnownHash
PyLong_AsSsize_t
PyFrame_New
PyFunction_Type
PyEval_MergeCompilerFlags
PyExc_RuntimeWarning
PyErr_WarnEx
_PyObject_CallFunction_SizeT
PyErr_GivenExceptionMatches
PyCode_NewEmpty
PyErr_SetObject
PyThreadState_Get
PyOS_snprintf
PyCFunction_Type
PyUnicode_InternFromString
PyObject_SetAttr
PyBaseObject_Type
PyObject_GetAttrString
PyEval_EvalCode
kernel32
GetSystemTimeAsFileTime
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
DisableThreadLibraryCalls
IsDebuggerPresent
vcruntime140
memcpy
memset
__C_specific_handler
__std_type_info_destroy_list
memcmp
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_execute_onexit_table
_cexit
PyInit_apollyon
Name
.text
Size
42KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
492B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,
count=2, id=257, version=27412,
count=13, id=261, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,
count=8, id=260, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,
count=3, id=259, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,
count=3, id=257, productName=VS2019 v16.11.8 build 30138, version=30138,
count=181, id=1, productName=Unmarked objects,
count=1, id=264, version=31104,
count=1, id=256, version=31104,
count=1, id=255, version=31104,
count=1, id=258, version=31104,