General
-
Target
C11Setup.exe
-
Size
252KB
-
MD5
13c8c7c417560e47443b11750d2255ae
-
SHA1
6ab9f5bf50b393607ac4c76c128fdbe66e602a11
-
SHA256
bf09875cb64f8b5c5b645baaaf6df787dc41d8c2289300fcebd5f66ccc7768a0
-
SHA512
4619a8f2ee35bc49d478053ad2cc3b8f33d550495e38483f4de88b8bd7a90b211b4eda8da8e0d3a57ab606864e7f980128c4f657fa8dd4bea03fefa6c08a6d56
-
SSDEEP
3072:oUmcx4yVy6PMV2DFgTH1bm09nQCR7c2ytBcL5BdkwvTkmEdiYY:oQy6PMVkuVb5pHWwvqdf
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Default
127.0.0.1:4449
127.0.0.1:6555
127.0.0.1:0
127.0.0.1:4040
oimkvkcrdcknatuxz
-
delay
1
-
install
true
-
install_file
C11Setup.exe
-
install_folder
%Temp%
Signatures
Files
-
C11Setup.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 181KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ