Overview
overview
3Static
static
3AsyncRAT.exe
windows10-2004-x64
1AsyncRAT.exe
windows11-ltsc_2024-x64
1bouncycast...to.dll
windows10-2004-x64
1bouncycast...to.dll
windows11-ltsc_2024-x64
1cgeoip.dll
windows10-2004-x64
1cgeoip.dll
windows11-ltsc_2024-x64
1costura.dll
windows10-2004-x64
1costura.dll
windows11-ltsc_2024-x64
1dnlib.dll
windows10-2004-x64
1dnlib.dll
windows11-ltsc_2024-x64
1fastcolore...ox.dll
windows10-2004-x64
1fastcolore...ox.dll
windows11-ltsc_2024-x64
1iconextractor.dll
windows10-2004-x64
1iconextractor.dll
windows11-ltsc_2024-x64
1vestris.re...ib.dll
windows10-2004-x64
1vestris.re...ib.dll
windows11-ltsc_2024-x64
1General
- Target AsyncRAT.exe
- Size 6.4MB
- Sample260930-2f53payw9p
- SHA256 06899071233d61009a64c726a4523aa13d81c2517a0486cc99ac5931837008e5
- MD5 97a429c4b6a2cb95ece0ddb24c3c2152
- SHA1 6fcc26793dd474c0c7113b3360ff29240d9a9020
- SHA512 524a63f39e472bd052a258a313ff4f2005041b31f11da4774d3d97f72773f3edb40df316fa9cc2a0f51ea5d8ac404cfdd486bab6718bae60f0d860e98e533f89
- SSDEEP 98304:+bPmDVa3VxobFwUN5xXhAqin1MNuSZTKA0t9FFPEG6xJJ33Je2PsBpCz6Ry:+7aIXUN5htin2bk9fcPHJDE7Cz60
- TLSH T1D166BE32B5E08268F062C874F09176B5EE723C764F28F9C7CD44BA692E376A58535F21
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
AsyncRAT.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
AsyncRAT.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
bouncycastle.crypto.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
bouncycastle.crypto.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
cgeoip.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
cgeoip.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
costura.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
costura.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
dnlib.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
dnlib.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
fastcoloredtextbox.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
fastcoloredtextbox.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
iconextractor.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
iconextractor.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
vestris.resourcelib.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
vestris.resourcelib.dll
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target AsyncRAT.exe
- Size 6.4MB
- SHA256 06899071233d61009a64c726a4523aa13d81c2517a0486cc99ac5931837008e5
- MD5 97a429c4b6a2cb95ece0ddb24c3c2152
- SHA1 6fcc26793dd474c0c7113b3360ff29240d9a9020
- SHA512 524a63f39e472bd052a258a313ff4f2005041b31f11da4774d3d97f72773f3edb40df316fa9cc2a0f51ea5d8ac404cfdd486bab6718bae60f0d860e98e533f89
- SSDEEP 98304:+bPmDVa3VxobFwUN5xXhAqin1MNuSZTKA0t9FFPEG6xJJ33Je2PsBpCz6Ry:+7aIXUN5htin2bk9fcPHJDE7Cz60
- TLSH T1D166BE32B5E08268F062C874F09176B5EE723C764F28F9C7CD44BA692E376A58535F21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target bouncycastle.crypto.dll
- Size 2.5MB
- SHA256 333903c7d22a27098e45fc64b77a264aa220605cfbd3e329c200d7e4b42c881c
- MD5 f0b3e112ce4807a28e2b5d66a840ed7f
- SHA1 54a6743781fd4ceb720331fce92f16186931192d
- SHA512 dc8ec9754c5e86f7e54e75ff3e5859c1b057f90e9c41788037b944a5db2cb3b70060763d0efcbe55ec595bcc47a9c0ff847a4876821470ca1659c31afd5b0190
- SSDEEP 49152:OSSJ+G1PjodumkjD6Oc0mqHZwueCtbu9kQN:6xodumo6Lr
- TLSH T132C53A1877F40613D6BAE7B595F09021A3F0F46EB393FB0B6591A7B50C13BA24C816A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target cgeoip.dll
- Size 2.3MB
- SHA256 d1ddd15e9c727a5ecf78d3918c17aee0512f5b181ad44952686beb89146e6bd0
- MD5 6d6e172e7965d1250a4a6f8a0513aa9f
- SHA1 b0fd4f64e837f48682874251c93258ee2cbcad2b
- SHA512 35daa38ad009599145aa241102bcd1f69b4caa55ebc5bb11df0a06567056c0ec5fcd02a33576c54c670755a6384e0229fd2f96622f12304dec58f79e1e834155
- SSDEEP 24576:TRgJE8pkCLLe/K43EnnnclQwIqJY0OjklWXQMFBRpmkL/59ah0USm3uwl00odi9p:TRgfX/59a6USdi9Ues6bV6boLO6r
- TLSH T1A2B53982AE8940DA343438DB75A15FAC49149FBD7F112F3D31A937886DF530A788EB52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target costura.dll
- Size 4KB
- SHA256 9e0d68e4a15788ca1464ee024b3422cfdf8a68bc9058ad0d9c6bc91614935eed
- MD5 d075a47a551e53e27889f83670a581e1
- SHA1 5954e332ec7732ba34c27e2d88d154d1919c1b07
- SHA512 d2f2ca4358102cb0d3cb90c1cebe9aa2cb2c6fb21facdf3471c50ab72d6ac907e789bb918508539c34c10fc948792c68f67363eb755b80a2343bd72dc9e93c0e
- TLSH T1CA81632193B8067AE9770FB29D7B03516375F921ED32C73F595561096C273248E72B32
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target dnlib.dll
- Size 1.1MB
- SHA256 2973d485556d8cd7a3d1f1a3a91cfb1f8d8e3492d2cb3beda529cde235023521
- MD5 17107a331c2bf9583231df0414b03089
- SHA1 4ccf5668d661262b65fa240faa8cc47a4205b9c6
- SHA512 f1baf7b0b3fdc0c0ef8530b2cc24a2bd47843b9d707b636fcbd7fc5052d2868c450efc2df6b4f1907eebd17f96fb4ce42fe15a0194a0124c05a62cca936b701f
- SSDEEP 24576:cgW20arTgWkk7z2B3KqW4x9TuJsj4F9Iv7fGNGPz:RC3x9H47
- TLSH T11A455C1177ED9B77E0BE8336E872095407F2D9066693EB0F1610EBA96C933985D013BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target fastcoloredtextbox.dll
- Size 323KB
- SHA256 ac926c92ccfc3789a5ae571cc4415eb1897d500a79604d8495241c19acdf01b9
- MD5 8610f4d3cdc6cc50022feddced9fdaeb
- SHA1 4b60b87fd696b02d7fce38325c7adfc9e806f650
- SHA512 693d1af1f89470eab659b4747fe344836affa0af8485b0c0635e2519815e5a498f4618ea08db9dcf421aac1069a04616046207ee05b9ed66c0a1c4a8f0bddd09
- SSDEEP 6144:0R0J4lx4/7BA4xvNdcwCOg04j0y5mwZkdmsqmLDi5eNH+Dl1SIP0:0R0J48lAovNd7CO34D4b4eNO
- TLSH T16564391012F84659F27F47BDD4B9C01CC3FAB566A99FEB0E89A560DA2EF37409905233
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target iconextractor.dll
- Size 10KB
- SHA256 440912d85d2f98bb4f508ab82847067c18e1e15be0d8ecdcff0cc19327527fc2
- MD5 640d8ffa779c6dd5252a262e440c66c0
- SHA1 3252d8a70a18d5d4e0cc84791d587dd12a394c2a
- SHA512 e12084f87bd46010aded22be30e902c5269a6f6bc88286d3bef17c71d070b17beada0fe9e691a2b2f76202b5f9265329f6444575f89aff8551c486eafe4d5f32
- SSDEEP 192:7f77J4cGYyfQknxLvIgyLY5xJeU5pPpZlEAs:HS2yINgyLYLJR5wl
- TLSH T179223809E7EA4B37DEB7873654134656E334BA10994FEF5B05CA50642CA73A00B12FBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target vestris.resourcelib.dll
- Size 76KB
- SHA256 7da3f0e77c4dddc82df7c16c8c781fade599b7c91e3d32eefbce215b8f06b12a
- MD5 944ce5123c94c66a50376e7b37e3a6a6
- SHA1 a1936ac79c987a5ba47ca3d023f740401f73529b
- SHA512 4c034ff51cc01567f3cb0796575528ca44623b864eb606266bcf955a9259ed26b20bec0086d79038158d3a5af2ada0a90f59d7c6aae9e545294fe77825dbe08b
- SSDEEP 1536:CSSYikTF0Z+sFGu11tIcyI1MtI9eDG3fL7:CJYD0Z9FGu11teI1r9ea3
- TLSH T13B731C1C977C8BE6C2FE06B9B422190667F0C706F22FE75EDDC8A4E97C957920612193
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10