Analysis
-
max time kernel
1797s -
max time network
1743s -
platform
windows11-21h2_x64 -
resource
win11-20240412-en -
resource tags
arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system -
submitted
19-04-2024 20:32
Behavioral task
behavioral1
Sample
C11Bootstrapper/Properties/C11Setup.exe
Resource
win11-20240412-en
Behavioral task
behavioral2
Sample
C11Bootstrapper/Properties/GuiLoader.exe
Resource
win11-20240412-en
Behavioral task
behavioral3
Sample
C11Bootstrapper/Properties/IndependenciesInstallation.bat
Resource
win11-20240412-en
Behavioral task
behavioral4
Sample
C11Bootstrapper/Properties/PageEditor.exe
Resource
win11-20240412-en
Behavioral task
behavioral5
Sample
C11Bootstrapper/Properties/msgbox.vbs
Resource
win11-20240412-en
General
-
Target
C11Bootstrapper/Properties/C11Setup.exe
-
Size
252KB
-
MD5
c23a7c501e475f0065efdc9775890deb
-
SHA1
adc0d1bb12657bd6ca4354399cbfab7b9ad9cd45
-
SHA256
b57490326cb83aaf68d2ddfd95655b89387956100c5d09c8fcd4fa50e54fb5c4
-
SHA512
f6374e254a5ccad62549b235b4c66ef6164cfc34fd91d9ca545d44dce87c3d78984759e858d5eae796f8a096f91cf3fe5f0e1255660b00b1ece430e82af539c7
-
SSDEEP
3072:yURcxONo2PMVI+DdH1bsv8eOQbR7c2ytBcL5BdkwvTkmEdxkY:yEo2PMVPdVbSOkWwvqdK
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Default
127.0.0.1:4449
chhphkahmfnasuyziqc
-
delay
1
-
install
false
-
install_folder
%Temp%
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe 1992 C11Setup.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1992 C11Setup.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1992 C11Setup.exe