Behavioral task
behavioral1
Sample
Client.exe
Resource
win10v2004-20240508-en
General
-
Target
Client.exe
-
Size
63KB
-
MD5
ad9b6aa93242a5519f99d9b0b3a3c3dc
-
SHA1
c7b6d6f7d2eb8a26e2de28fdf718bb4430dc25dc
-
SHA256
4af44daa24c2d13b6395a3e850d81f3b3e9d2a29b902bdd75173961ac9d530f2
-
SHA512
685e54e7fefbf85cf20aa87ecadc54c2361fbb24de4911cef2cae431e2bb0514892d4d75a3f326cc6fb5ac592370fdd91c4bfac5532c41d67dfaad37662c6820
-
SSDEEP
1536:QhB5LrUwk4XO01V5eeiIVrGbbXwMJVGODpqKmY7:QhB5LrUwk4XVVseXGbbXVJpgz
Malware Config
Extracted
asyncrat
5.0.5
Venom Clients
127.0.0.1:4449
Venom_RAT_HVNC_Mutex_Venom RAT_HVNC
-
delay
1
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
Client.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ