Overview

overview

10

Static

static

10

Shellbag analyzer.exe

windows10-1703-x64

10

Shellbag analyzer.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Shellbag analyzer.exe

  • Size

    247KB

  • MD5

    e5dc76743d789ff02bc6f747804fd327

  • SHA1

    b96c2778e123656266782da48f8b9a84918c8fc2

  • SHA256

    24e23f8bcdde00e6158591a10b0e195d525315fd4cabc0de541ac27f9c17f8bc

  • SHA512

    dc6fa31d3b12bf2786b76bbf74c7d2ef13e5f2a0b09082e693b004fad2efa67eef90cac7586ec43c64705dedcb57cebfd11c865b16706aac2452318842db700d

  • SSDEEP

    6144:iPEGPMVOrVbjlnwF9kfK8rpClz0KBb6o589GHWHWujiSPbp:iPEU9lhgBuj/PV

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

Attributes
  • delay

    1

  • install

    true

  • install_file

    update.exe

  • install_folder

    %AppData%

  • pastebin_config

    https://pastebin.com/raw/hntWwyYn

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Shellbag analyzer.exe
    .exe windows:4 windows x86 arch:x86

    Password: 7777

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections