Behavioral task
behavioral1
Sample
Vanta-Loader.exe
Resource
win7-20231020-en
General
-
Target
Vanta-Loader.exe
-
Size
3.6MB
-
MD5
1deafd22f6f06878aa0e0dc73a759374
-
SHA1
3052556ffd492d726c245cb96cbab61799824985
-
SHA256
fd04c8839b0eb04ec31da085482305d55e7d8c7f8da9ea44137580d9bbe1dc70
-
SHA512
4699d89235899e4af2b2f2db1e458fb94e34e06ad8ea0e6583a9dfebc36e2d0d65bbdf71bb0fb7a96569a6b4a0a226928ff7f74c233def450055a3f46337d151
-
SSDEEP
768:SuY6LVcsTPq781wC8A+Xj2EqLDkvB3E1+T4jSBGHmDbDFph8oXZYtRjPKUSu0dph:7eQPcqlsxEsYUbPhFGPPKTu0dpqKmY7
Malware Config
Extracted
asyncrat
Default
31.214.240.57:3232
西d艾zש吾伊TnA35Ι斯ΑΖاaukqG
-
delay
1
-
install
true
-
install_file
svchost.exe
-
install_folder
%AppData%
Signatures
Files
-
Vanta-Loader.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ