Behavioral task
behavioral1
Sample
Client.exe
Resource
win7-20230220-en
General
-
Target
Client.exe
-
Size
74KB
-
MD5
647d624fb3cd4573ca2ebccd23349fc4
-
SHA1
3e3d5cde0754f34954c2641625fc16e7557f55c7
-
SHA256
8c164f6f76dd0002ee97745b9571eddbc50585136c17d4e8344d73e77d96f306
-
SHA512
9c75dab59de56c9c70f6a665c36b4565030923f0ccc75551fa52e958c9ff46487991289ad7f51e6591136eb1850b3879ad45d627cb6f7e5a72fdea9b2bd563b7
-
SSDEEP
1536:aUZGcx5NVCMoPMVWe9VdQuDI6H1bf/IvhvLQzcZLVclN:aU8cx5zHoPMVWe9VdQsH1bfYNLQQBY
Malware Config
Extracted
asyncrat
Venom Pwn3rzs' Edtition v6.0.1
Default
209.25.141.180:4449
209.25.141.180:7878
209.25.141.180:28818
ufbaxrshcjfuoll
-
delay
1
-
install
false
-
install_folder
%AppData%
Files
-
Client.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ