General
-
Target
assssss.exe
-
Size
74KB
-
Sample
240416-1l8v4afa2w
-
MD5
00633c71d9fa6e703dacc8c6266b2613
-
SHA1
c673396470a64a46c5c96643aa7558a35722faf2
-
SHA256
cef1b063659f6f90cb4a3d0dc14295919ea7c11020918d9c3a01a7705dd2e175
-
SHA512
840a93b7d5e992176f672618b8f4f23f0e697093656914525229555970dd91c19ceec1996d6d00d5ca372b029e944164d73d36d19994ad5c435618b6efa8f0cf
-
SSDEEP
1536:eUYccx0dxCKg6PMV1QKI/H1bz/uVSjhaQzcaLVclN:eUlcx0f9g6PMV1QzH1bzW6haQLBY
Behavioral task
behavioral1
Sample
assssss.exe
Resource
win7-20240215-en
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Default
66.66.146.74:9511
kvudvdwyjbukkqcnuoq
-
delay
1
-
install
true
-
install_file
Windows Host.exe
-
install_folder
%Temp%
Targets
-
-
Target
assssss.exe
-
Size
74KB
-
MD5
00633c71d9fa6e703dacc8c6266b2613
-
SHA1
c673396470a64a46c5c96643aa7558a35722faf2
-
SHA256
cef1b063659f6f90cb4a3d0dc14295919ea7c11020918d9c3a01a7705dd2e175
-
SHA512
840a93b7d5e992176f672618b8f4f23f0e697093656914525229555970dd91c19ceec1996d6d00d5ca372b029e944164d73d36d19994ad5c435618b6efa8f0cf
-
SSDEEP
1536:eUYccx0dxCKg6PMV1QKI/H1bz/uVSjhaQzcaLVclN:eUlcx0f9g6PMV1QzH1bzW6haQLBY
-
Async RAT payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-