General
-
Target
Client.exe
-
Size
74KB
-
MD5
01185d73b0dad2ba6854e38910d18796
-
SHA1
c8c46e1a678702ee5b95c45357541b858323face
-
SHA256
23d9c97820c0a1e65f9f7409871934915a63d88aa137fc16fcc14d6d958b0821
-
SHA512
551be50c2105838036e6cd5f84bc6d4b0a7c0c04d68e7b2f558951b9a0ce58dab7b26088a46eaf06ec19683636c798bceb0c803aaec8aecf18353b3be9a78848
-
SSDEEP
1536:EUEkcx4VHsC0SPMV7e9VdQuDI6H1bf/9C7Qzc2LVclN:EUxcx4GfSPMV7e9VdQsH1bfVqQPBY
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Default
181.47.208.50:4449
yqhbuwfankgiktwqwmr
-
delay
1
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
Client.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ