General
-
Target
fa663aff27176cbab81de3c50056a1ffc9a9d1ccb3a13fa9f6b88aadbf712fe5
-
Size
74KB
-
Sample
240724-frjg6szaqr
-
MD5
6d12dc17aa24f1430f6567a8c8c43343
-
SHA1
c001ab3983b99d60b03947425e5149fc29f1eb48
-
SHA256
fa663aff27176cbab81de3c50056a1ffc9a9d1ccb3a13fa9f6b88aadbf712fe5
-
SHA512
38d4509e080f95a137997c9daf0e17cef0000ce8f9a046e96d540bd4e7ace3562bac6b2a3dae2383e20b5f20b6e363220e6d89f126a48165eabf0919c5cdcf74
-
SSDEEP
1536:j1URgcxBVcC9WPMV2mJkIkHYbz/t8M9QzcqLVclN:RUucxBSOWPMV2mJ+HYbz/QbBY
Behavioral task
behavioral1
Sample
fa663aff27176cbab81de3c50056a1ffc9a9d1ccb3a13fa9f6b88aadbf712fe5.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fa663aff27176cbab81de3c50056a1ffc9a9d1ccb3a13fa9f6b88aadbf712fe5.exe
Resource
win10v2004-20240709-en
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Valorant HitBox Hile
xaqqycywslhr
-
delay
1
-
install
true
-
install_file
Valorant HitBox Hile.exe
-
install_folder
%AppData%
-
pastebin_config
https://pastebin.ai/raw/s7drzqs5vr
Targets
-
-
Target
fa663aff27176cbab81de3c50056a1ffc9a9d1ccb3a13fa9f6b88aadbf712fe5
-
Size
74KB
-
MD5
6d12dc17aa24f1430f6567a8c8c43343
-
SHA1
c001ab3983b99d60b03947425e5149fc29f1eb48
-
SHA256
fa663aff27176cbab81de3c50056a1ffc9a9d1ccb3a13fa9f6b88aadbf712fe5
-
SHA512
38d4509e080f95a137997c9daf0e17cef0000ce8f9a046e96d540bd4e7ace3562bac6b2a3dae2383e20b5f20b6e363220e6d89f126a48165eabf0919c5cdcf74
-
SSDEEP
1536:j1URgcxBVcC9WPMV2mJkIkHYbz/t8M9QzcqLVclN:RUucxBSOWPMV2mJ+HYbz/QbBY
Score10/10-
Async RAT payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-