General
-
Target
Client.exe
-
Size
73KB
-
MD5
336cd29221ecc835bcbf353ccae805c0
-
SHA1
0bbe68fa5feb19e429a8241eb4e8cb27a6d22a89
-
SHA256
0c48eda9bbbac547e4b4c17fdd2fa685695e5d20c5b0c1582e8e08879540780b
-
SHA512
45466e3bfa81a9e8c61dd55a26735e3eef927fa641e21a515e8f6fda4d9ea9be530ce2dbd82f05fbcc1a476d88b03a9d5539c753c1f1c37b5207f5f20d3cd737
-
SSDEEP
1536:qUN0cxVGlCBiPMVye9VdQkhDIyH1bf/MDJQzc33VclN:qU2cxVMWiPMVye9VdQgH1bfUDJQylY
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Default
127.0.0.1:4449
127.0.0.144:4449
5.12.198.225:4449
fmvoxzfzoacbja
-
delay
1
-
install
false
-
install_folder
%AppData%
Signatures
-
Asyncrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Client.exe
Files
-
Client.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ