Behavioral task
behavioral1
Sample
Client.exe
Resource
win7-20240221-en
General
-
Target
Client.exe
-
Size
126KB
-
MD5
8d29f52200eff9f993556ab0a83b2c97
-
SHA1
cb64f1d0bc5d3e259c7450c6266aef1a5c6b8d7a
-
SHA256
d446c6ade7a35201e7f7f3fbe96f4a89b69d5c030538f4c66d2a225f16f18b45
-
SHA512
cdf86935c3fe533583e5de5f2cca4f54cd00a9f684568c6b6971135d1bf16db0d234edadbc4d67f9b98518e215f0573737aa0d008a7026cdc27ddc618ed36b2c
-
SSDEEP
3072:oU4cxeFImPMVWe9VdQsH1bfatAXjQw8OGy2KO7U+0n5/c9OY:onImPMVWaesVbStAXjwOF+2/cE
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Default
147.185.221.18:61957
7DFE3A8F-73B6-42F5-B1E7-9FC0F6A05F62
-
delay
1
-
install
true
-
install_file
KITTY.exe
-
install_folder
%Temp%
Signatures
Files
-
Client.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ