General
-
Target
Client.exe
-
Size
252KB
-
MD5
c3594756513a1d8f4b87b955747e0a6e
-
SHA1
dad561768d270ecff3ef2c836fd7c492036f9641
-
SHA256
83aabb9170fe13459e9c97ad3680b7c9056b580bebc595f8c38a84ed7e093991
-
SHA512
46f0158f2a2e71121079f9a2498c39230ab2b208805fb805e2c1a2d0de757d2e84e53a563bea5485449c9f662105f5067f7555cd3b34b65cf970f81e8ccc458e
-
SSDEEP
3072:DUdcxMmw6PMV2e9VdQsH1bfDpnQSR7c2ytBcL5BdkwvTkmEdeYY:Ddw6PMV2aesVbNn3Wwvqdb
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Default
127.0.0.1:4449
127.0.0.1:6555
127.0.0.1:0
127.0.0.1:4040
bbfikyzckwofs
-
delay
1
-
install
true
-
install_file
C11Setup.exe
-
install_folder
%Temp%
Signatures
Files
-
Client.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 181KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ