Behavioral task
behavioral1
Sample
LXLauncher.exe
Resource
win7-20240220-en
General
-
Target
LXLauncher.exe
-
Size
214KB
-
MD5
6dc28da98160cf5b16dacc5e349eff70
-
SHA1
4dc6187056f07cc1cb99fccd28a75ccfed408d61
-
SHA256
0b5a765b34c4b8643a5eb18190200db4557622afa4c51792fdfd454aae275419
-
SHA512
c8729b98b4c295655deb5fcd3d5bbe293401cbf33cf1c2a2fad97061504df64e145f28ed4898fb01bcb8a5bb4e3030c8ff57a9de4ff5a6e2c86b2336ee6e36a4
-
SSDEEP
3072:tUAcxVMWiPMVaa37EH1byfHQCKramZ4sj+9Uz+HBnltdbh77xmnkqnnkwY:tvWiPMValVbCHA5TjWUzoll7k9
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Default
127.0.0.1:55
127.0.0.1:1194
193.161.193.99:55
193.161.193.99:1194
sqxwgmoozigxgrinmd
-
delay
1
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
LXLauncher.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ