Behavioral task
behavioral1
Sample
bc026ea63bbeb4a4ad97f2770156454c2912c87c7dc8c1b393ed1e652dad8dc2.exe
Resource
win7-20230831-en
General
-
Target
bc026ea63bbeb4a4ad97f2770156454c2912c87c7dc8c1b393ed1e652dad8dc2
-
Size
73KB
-
MD5
8a237d25f417228e33998ac13c87ef49
-
SHA1
56ffae43e9bf352c886a297dcd3f15c3b03df2df
-
SHA256
bc026ea63bbeb4a4ad97f2770156454c2912c87c7dc8c1b393ed1e652dad8dc2
-
SHA512
2261178f34ea9417eca5e8aa4a04893456abd150ffae59f9068d1607a855495f3c34e7e490177240dd426f5215882945c13870a4ef3766ccf513ded7938a6898
-
SSDEEP
1536:DUEkcx4VHsC0SPMV7e9VdQkhDIyH1bf/n0Qzc33VclN:DUxcx4GfSPMV7e9VdQgH1bfsQSlY
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Admin
16.170.222.231:13044
kjbissrjkkidbsmuoz
-
delay
1
-
install
false
-
install_folder
%AppData%
Signatures
-
Asyncrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc026ea63bbeb4a4ad97f2770156454c2912c87c7dc8c1b393ed1e652dad8dc2
Files
-
bc026ea63bbeb4a4ad97f2770156454c2912c87c7dc8c1b393ed1e652dad8dc2.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ