Behavioral task
behavioral1
Sample
fa663aff27176cbab81de3c50056a1ffc9a9d1ccb3a13fa9f6b88aadbf712fe5.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fa663aff27176cbab81de3c50056a1ffc9a9d1ccb3a13fa9f6b88aadbf712fe5.exe
Resource
win10v2004-20240709-en
General
-
Target
fa663aff27176cbab81de3c50056a1ffc9a9d1ccb3a13fa9f6b88aadbf712fe5
-
Size
74KB
-
MD5
6d12dc17aa24f1430f6567a8c8c43343
-
SHA1
c001ab3983b99d60b03947425e5149fc29f1eb48
-
SHA256
fa663aff27176cbab81de3c50056a1ffc9a9d1ccb3a13fa9f6b88aadbf712fe5
-
SHA512
38d4509e080f95a137997c9daf0e17cef0000ce8f9a046e96d540bd4e7ace3562bac6b2a3dae2383e20b5f20b6e363220e6d89f126a48165eabf0919c5cdcf74
-
SSDEEP
1536:j1URgcxBVcC9WPMV2mJkIkHYbz/t8M9QzcqLVclN:RUucxBSOWPMV2mJ+HYbz/QbBY
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Valorant HitBox Hile
xaqqycywslhr
-
delay
1
-
install
true
-
install_file
Valorant HitBox Hile.exe
-
install_folder
%AppData%
-
pastebin_config
https://pastebin.ai/raw/s7drzqs5vr
Signatures
Files
-
fa663aff27176cbab81de3c50056a1ffc9a9d1ccb3a13fa9f6b88aadbf712fe5.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ