Behavioral task
behavioral1
Sample
28add650000.exe
Resource
win10-20231215-en
Behavioral task
behavioral2
Sample
28add650000.exe
Resource
win10v2004-20231215-en
General
-
Target
28add650000.exe
-
Size
76KB
-
MD5
bed58dec24567f2db0facb34aae9746d
-
SHA1
4fad95ee6c482ad23f778f87b78ac0ed9f3738dd
-
SHA256
087cd98565ba0bb9689db91c94e4203f2a7e594e67af3580f08cf47ac9d78b41
-
SHA512
f9f7fb3a9ac92bb7bcaf69ef32291f02fc5dc2241acd7f265c86921bd4d15e8c3d71b868b560812269cf3828957bdbc40144205733dcaebcbbf30fa9bf550984
-
SSDEEP
1536:4UUPcxVteCW7PMVQe8BegWIeH1bJ/VDQzcaLVclN:4UmcxV4x7PMVt8VuH1bJVQLBY
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Default
67.205.154.243:4431
wuhjwqibozr
-
delay
1
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
28add650000.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ