General
- Target junobigboy.exe
- Size 45KB
- Sample261113-red8gacw4l
- SHA256 d5f1dbca6abe897ff8473b7a9fab9a17147c8af8d751594ce6a74c9bc2cc98c4
- MD5 9228a0a7a4622c40eef25c4a985bdb07
- SHA1 bd763efdd4c7f373228c8c619c5798085bbeddec
- SHA512 08ba5d19eb0e9305491e2f9bbcf17a0e6c54ce8dc8a4f24403ab23f8c0eaac780143e12cacceed4b0e227125cd6e5d72bd7a6990c1b0addd7fa91af1367ed60c
- SSDEEP 768:muQPPTUo04QiWUUmjSmo2qMC77DfI1PIdzjbCgX3i1AZA1XTNnPPYfBDZyx:muQPPTUwa2G73wSd3blXS1A+1XTN4pdw
- TLSH T128232A003BE8812BF2BE4BB89CF35145867AF1673603D94A2CC452DB5613FC69A436F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
junobigboy.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
junobigboy.exe
Resource
win10ltsc2021-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
junobigboy.exe
Resource
win11-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
asyncrat
Version
-
0.5.8
Botnet
-
Default
C2
-
ko66.asia:443
-
ko66.asia:80
-
www.ko66.asia:443
-
www.ko66.asia:80
Mutex
-
I5NtyVhYPllG
Attributes
-
delay
5
-
install
false
-
install_folder
%AppData%
aes.plain
Targets
-
- Target junobigboy.exe
- Size 45KB
- SHA256 d5f1dbca6abe897ff8473b7a9fab9a17147c8af8d751594ce6a74c9bc2cc98c4
- MD5 9228a0a7a4622c40eef25c4a985bdb07
- SHA1 bd763efdd4c7f373228c8c619c5798085bbeddec
- SHA512 08ba5d19eb0e9305491e2f9bbcf17a0e6c54ce8dc8a4f24403ab23f8c0eaac780143e12cacceed4b0e227125cd6e5d72bd7a6990c1b0addd7fa91af1367ed60c
- SSDEEP 768:muQPPTUo04QiWUUmjSmo2qMC77DfI1PIdzjbCgX3i1AZA1XTNnPPYfBDZyx:muQPPTUwa2G73wSd3blXS1A+1XTN4pdw
- TLSH T128232A003BE8812BF2BE4BB89CF35145867AF1673603D94A2CC452DB5613FC69A436F9
- MD5 SHA1 SHA512 SSDEEP TLSH