General
-
Target
94fada921a79c422e6dbf75eeca7429690d75901b5ef982a44874971b38708a0.exe
-
Size
73KB
-
Sample
240522-cfkdjsgg76
-
MD5
26125c571d6225959832f37f9ac4629a
-
SHA1
ed7af3c41eaab7b10a2639f06212bd6ee0db6899
-
SHA256
94fada921a79c422e6dbf75eeca7429690d75901b5ef982a44874971b38708a0
-
SHA512
172b72f2a92c5ea119ee9369c91f6fb4431efc95fd7c1dad65c1d45886ae17025e55d7a2bf9bfbae6f163928799f0b79dc874ed19383aff281f5466a81b590d4
-
SSDEEP
1536:CSUEkcxNYungvHZDJ/SkXizIqksbLvPMw6/eqmmRhdWVH1bfbv3SrwzUQbVclN:CSUxcxNYungPZDJ/SkXizIqks/vPMwZq
Behavioral task
behavioral1
Sample
94fada921a79c422e6dbf75eeca7429690d75901b5ef982a44874971b38708a0.exe
Resource
win7-20240221-en
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.2
Default
85.209.133.18:4545
tdipywykihsjieff
-
delay
1
-
install
false
-
install_folder
%AppData%
Targets
-
-
Target
94fada921a79c422e6dbf75eeca7429690d75901b5ef982a44874971b38708a0.exe
-
Size
73KB
-
MD5
26125c571d6225959832f37f9ac4629a
-
SHA1
ed7af3c41eaab7b10a2639f06212bd6ee0db6899
-
SHA256
94fada921a79c422e6dbf75eeca7429690d75901b5ef982a44874971b38708a0
-
SHA512
172b72f2a92c5ea119ee9369c91f6fb4431efc95fd7c1dad65c1d45886ae17025e55d7a2bf9bfbae6f163928799f0b79dc874ed19383aff281f5466a81b590d4
-
SSDEEP
1536:CSUEkcxNYungvHZDJ/SkXizIqksbLvPMw6/eqmmRhdWVH1bfbv3SrwzUQbVclN:CSUxcxNYungPZDJ/SkXizIqks/vPMwZq
-
Detects executables attemping to enumerate video devices using WMI
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-