Behavioral task
behavioral1
Sample
1ef225d55b567e06ca8c6197aa237b76504a1a270a512b80b50280154af98146.exe
Resource
win10v2004-20240802-en
General
-
Target
1ef225d55b567e06ca8c6197aa237b76504a1a270a512b80b50280154af98146
-
Size
74KB
-
MD5
143734ace32a278d89d77af8c7fdfa80
-
SHA1
ef834bb92bb57eda87458d1a2ee3525a4b91a6ef
-
SHA256
1ef225d55b567e06ca8c6197aa237b76504a1a270a512b80b50280154af98146
-
SHA512
e894eecfa4f84dc1e0abbc07cab9faefbf4e9cdd6e4a93089970ce16d01e1db4aa3bd309281e07a36d854691852654e099eecc18244db377cc5664c458a7ce9d
-
SSDEEP
1536:/Ut8cxqnHXC56PMV+e9VdQuDI6H1bf/TOur1LQzcQTtVclN:/UOcxq3O6PMV+e9VdQsH1bfLPrVQlT/Y
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
rufrwqqzhtx
-
delay
1
-
install
true
-
install_file
WinUpdate.exe
-
install_folder
%AppData%
Signatures
Files
-
1ef225d55b567e06ca8c6197aa237b76504a1a270a512b80b50280154af98146.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ