General
-
Target
db6bf30fd61d330a5466459124fd4f21.bin
-
Size
774KB
-
Sample
240701-d97llsydjm
-
MD5
f15af01024cff734e85df58c88d7a593
-
SHA1
e25ccf07d55b2c75fd57e5e571e4b7f9f65cd0a5
-
SHA256
e8c888ad87c5b9e62670edca84a5fa468cd92ad1137beb727cfb42e8b327d03c
-
SHA512
b1a01c94806335478204dbab9e7987a616d01ccf047b82f6fb6ee1d5d70ba5369ad67fd335562a2fb26203a0cbc9102f6f452f142c3d8598daee31f0110fb7df
-
SSDEEP
24576:9ssVnQkufFke61o6k/0hHaYR8wNrPsWKV:9bnYjqXk/0FZnNUr
Static task
static1
Behavioral task
behavioral1
Sample
20e3320ed125693938485c94c8ebf1a981ed2d717bba86f137a4b327757946fe.exe
Resource
win7-20240221-en
Malware Config
Extracted
asyncrat
0.5.6D
Default
seznam.zapto.org:6606
seznam.zapto.org:7707
seznam.zapto.org:8808
zaqhepdivuiitce
-
delay
5
-
install
true
-
install_file
sezznam.exe
-
install_folder
%AppData%
Targets
-
-
Target
20e3320ed125693938485c94c8ebf1a981ed2d717bba86f137a4b327757946fe.exe
-
Size
897KB
-
MD5
db6bf30fd61d330a5466459124fd4f21
-
SHA1
5beef951cc1052daeca87d5ef69999b3d0cc1381
-
SHA256
20e3320ed125693938485c94c8ebf1a981ed2d717bba86f137a4b327757946fe
-
SHA512
f794a8ed161e23951299890660fd98f42cd0159aca9d6f653263170b0c63ab8b6a4ba2101f13862541440b01517da2c6348a26f1a1cec470878abe4b796474dd
-
SSDEEP
24576:KMPzX5QdJTGSQfTWJcWF2dZ7T8IY3Sd+L0S6D9:KMLqXTGSjcQmZ7QIcSEmD
-
Async RAT payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-