General
-
Target
d6c3e22a2d260e9124481f4a82278da5.exe
-
Size
204KB
-
Sample
240804-pg6z6avdrr
-
MD5
d6c3e22a2d260e9124481f4a82278da5
-
SHA1
151167da902148943ba8554fab4331d82ec8b150
-
SHA256
6475637fff05177a05bf6e84301c09492f21766ea3ba0068f3f70c4d0d886a9e
-
SHA512
11f92b994434c43c0a2393e1347b4b96ad00be36ade16b16860b1fed65d76a7a5d9ef35019092ea37db3f841b66bf5b8ca1187ba84cb63d22d95057439d7b967
-
SSDEEP
3072:60U2cxq3O6PMV9iFTH1bRGAgxy1QhWwfBtOEp7ybMj/0vU7yZED+CDgbB+Y:xDO6PMVQVbjgxkoW6mEpmbMjgU7yZf8
Behavioral task
behavioral1
Sample
d6c3e22a2d260e9124481f4a82278da5.exe
Resource
win7-20240704-en
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
server.underground-cheat.xyz
-
delay
1
-
install
true
-
install_file
WinUpdate.exe
-
install_folder
%AppData%
Targets
-
-
Target
d6c3e22a2d260e9124481f4a82278da5.exe
-
Size
204KB
-
MD5
d6c3e22a2d260e9124481f4a82278da5
-
SHA1
151167da902148943ba8554fab4331d82ec8b150
-
SHA256
6475637fff05177a05bf6e84301c09492f21766ea3ba0068f3f70c4d0d886a9e
-
SHA512
11f92b994434c43c0a2393e1347b4b96ad00be36ade16b16860b1fed65d76a7a5d9ef35019092ea37db3f841b66bf5b8ca1187ba84cb63d22d95057439d7b967
-
SSDEEP
3072:60U2cxq3O6PMV9iFTH1bRGAgxy1QhWwfBtOEp7ybMj/0vU7yZED+CDgbB+Y:xDO6PMVQVbjgxkoW6mEpmbMjgU7yZf8
-
Async RAT payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-