General
-
Target
3b03a24bfde864b0d8b17213f7f2deb6d7e3f5f74b34d3b601cbadd961b904fc
-
Size
204KB
-
Sample
240818-xbsjksxhjh
-
MD5
dfcfcd78d212140c3b087d315d5ed33b
-
SHA1
a3a5f02aa532c70f3452763ed6fbdfa03a7fac44
-
SHA256
3b03a24bfde864b0d8b17213f7f2deb6d7e3f5f74b34d3b601cbadd961b904fc
-
SHA512
8dd40a9d957745926f519f97a03a5727f79f120477aa624e7f8f48d6b5275f6b45df4ee998868dd4ff738f9851a0aac32df13b1674ca528cdf5fefc731ed4da7
-
SSDEEP
3072:dURcxswS6PMVSsl3H1bNSGQNWwfBtOEp7ybMj/0vU7yZED+CDgbB+Y:d3S6PMVNVbR0W6mEpmbMjgU7yZf8
Behavioral task
behavioral1
Sample
3b03a24bfde864b0d8b17213f7f2deb6d7e3f5f74b34d3b601cbadd961b904fc.exe
Resource
win7-20240729-en
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
server.underground-cheat.xyz
-
delay
1
-
install
true
-
install_file
WinUpdate.exe
-
install_folder
%AppData%
Targets
-
-
Target
3b03a24bfde864b0d8b17213f7f2deb6d7e3f5f74b34d3b601cbadd961b904fc
-
Size
204KB
-
MD5
dfcfcd78d212140c3b087d315d5ed33b
-
SHA1
a3a5f02aa532c70f3452763ed6fbdfa03a7fac44
-
SHA256
3b03a24bfde864b0d8b17213f7f2deb6d7e3f5f74b34d3b601cbadd961b904fc
-
SHA512
8dd40a9d957745926f519f97a03a5727f79f120477aa624e7f8f48d6b5275f6b45df4ee998868dd4ff738f9851a0aac32df13b1674ca528cdf5fefc731ed4da7
-
SSDEEP
3072:dURcxswS6PMVSsl3H1bNSGQNWwfBtOEp7ybMj/0vU7yZED+CDgbB+Y:d3S6PMVNVbR0W6mEpmbMjgU7yZf8
-
Async RAT payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-