General
-
Target
a16509e5f47dfc723e8ac146aef92046a65551452c9692d443dfa64fcc879392.exe
-
Size
75KB
-
Sample
240418-b6vrjagh8z
-
MD5
2e5d5abda2f010c8c2cceeb6ff027cc3
-
SHA1
43b36f81335b342de747e4761af0474dc16d6399
-
SHA256
a16509e5f47dfc723e8ac146aef92046a65551452c9692d443dfa64fcc879392
-
SHA512
9f58d9cfb31f924bd6072696868e93808a7b5dc21b13df5db979e98b11ae3a20cfd28cf7c79cdf493bf3e7b4386f95c0f6d1d7a8aff408d945fb19392a012c91
-
SSDEEP
1536:fukUsOSeCX/PMRkYKt2OlY6H1bf/iaVbkzkiLVclN:fXU/jAPMRkYv4jH1bfxVbk7BY
Behavioral task
behavioral1
Sample
a16509e5f47dfc723e8ac146aef92046a65551452c9692d443dfa64fcc879392.exe
Resource
win7-20240221-en
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Default
51.254.53.24:4449
hoyqzolrquxmbnzaee
-
delay
1
-
install
false
-
install_folder
%AppData%
Extracted
http://xcu.exgaming.click
Extracted
http://xcu5.exgaming.click
Targets
-
-
Target
a16509e5f47dfc723e8ac146aef92046a65551452c9692d443dfa64fcc879392.exe
-
Size
75KB
-
MD5
2e5d5abda2f010c8c2cceeb6ff027cc3
-
SHA1
43b36f81335b342de747e4761af0474dc16d6399
-
SHA256
a16509e5f47dfc723e8ac146aef92046a65551452c9692d443dfa64fcc879392
-
SHA512
9f58d9cfb31f924bd6072696868e93808a7b5dc21b13df5db979e98b11ae3a20cfd28cf7c79cdf493bf3e7b4386f95c0f6d1d7a8aff408d945fb19392a012c91
-
SSDEEP
1536:fukUsOSeCX/PMRkYKt2OlY6H1bf/iaVbkzkiLVclN:fXU/jAPMRkYv4jH1bfxVbk7BY
-
Detects executables attemping to enumerate video devices using WMI
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-