General
-
Target
gf.exe
-
Size
63KB
-
Sample
240124-qbtcjsbaaj
-
MD5
908b6520fb3f68488bb7954d28fb1f29
-
SHA1
5dab526bd575eb13f666929839dcfa260b04cf34
-
SHA256
dbc611e40b86bb30535d356ef45ab732a0421e98ca76d1a337d6ee2f18cdd517
-
SHA512
c457da114889c567235ff9da24b5d33e0d2c750acd3581ad949967b8de71874f383bf7949a89c129e35c534d720c2273c7cc0ba550ab5240857f02d3e11b84f7
-
SSDEEP
1536:Wvw4ZBAbazxvutlT+GbbSwiNfGuDpqKmY7:WvhIaz1KQGbbSDgz
Behavioral task
behavioral1
Sample
gf.exe
Resource
win11-20231215-en
Malware Config
Extracted
asyncrat
5.0.5
Venom Clients
127.0.0.1:42474
176.150.69.221:42474
Venom_RAT_HVNC_Mutex_Venom RAT_HVNC
-
delay
1
-
install
true
-
install_file
aaaaaaaaaaaaaaaaaaaaaa.exe
-
install_folder
%AppData%
Targets
-
-
Target
gf.exe
-
Size
63KB
-
MD5
908b6520fb3f68488bb7954d28fb1f29
-
SHA1
5dab526bd575eb13f666929839dcfa260b04cf34
-
SHA256
dbc611e40b86bb30535d356ef45ab732a0421e98ca76d1a337d6ee2f18cdd517
-
SHA512
c457da114889c567235ff9da24b5d33e0d2c750acd3581ad949967b8de71874f383bf7949a89c129e35c534d720c2273c7cc0ba550ab5240857f02d3e11b84f7
-
SSDEEP
1536:Wvw4ZBAbazxvutlT+GbbSwiNfGuDpqKmY7:WvhIaz1KQGbbSDgz
Score10/10-
Async RAT payload
-
Executes dropped EXE
-