General
-
Target
0bafe977cd4fd7ff27917e0aed453c8af46b52992553c1a975a2b7f6d2823ac4
-
Size
74KB
-
Sample
240818-w4nwes1arn
-
MD5
60a2e12c26687be2c910159d0e324829
-
SHA1
f4aa9963bb15fd6a56f1da05fb51e80245010bec
-
SHA256
0bafe977cd4fd7ff27917e0aed453c8af46b52992553c1a975a2b7f6d2823ac4
-
SHA512
3dfebdf6bf65fa1d51f942a93362aeb7872f39de34836a2221075d6661ed2322c72fda8562e08e165d875ed19fcfb6c91daced5f820a50608ae5d108d5f13ed4
-
SSDEEP
1536:2RU98cxpeaC/zPMV2UT7a3I671bI/4ev1QzcR8VclN:8U+cxp7AzPMV8D71bIgetQY+Y
Behavioral task
behavioral1
Sample
0bafe977cd4fd7ff27917e0aed453c8af46b52992553c1a975a2b7f6d2823ac4.exe
Resource
win7-20240705-en
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Default
147.185.221.20:22308
147.185.221.20:9090
vfravbfpvqwqeb
-
delay
1
-
install
true
-
install_file
steam.exe
-
install_folder
%AppData%
Targets
-
-
Target
0bafe977cd4fd7ff27917e0aed453c8af46b52992553c1a975a2b7f6d2823ac4
-
Size
74KB
-
MD5
60a2e12c26687be2c910159d0e324829
-
SHA1
f4aa9963bb15fd6a56f1da05fb51e80245010bec
-
SHA256
0bafe977cd4fd7ff27917e0aed453c8af46b52992553c1a975a2b7f6d2823ac4
-
SHA512
3dfebdf6bf65fa1d51f942a93362aeb7872f39de34836a2221075d6661ed2322c72fda8562e08e165d875ed19fcfb6c91daced5f820a50608ae5d108d5f13ed4
-
SSDEEP
1536:2RU98cxpeaC/zPMV2UT7a3I671bI/4ev1QzcR8VclN:8U+cxp7AzPMV8D71bIgetQY+Y
-
Async RAT payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-