Behavioral task
behavioral1
Sample
850932bf796d17da05dc8c531993db6423b56686ff7dc68cc0a802e87f827fad.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
850932bf796d17da05dc8c531993db6423b56686ff7dc68cc0a802e87f827fad.exe
Resource
win10v2004-20240802-en
General
-
Target
850932bf796d17da05dc8c531993db6423b56686ff7dc68cc0a802e87f827fad
-
Size
6.3MB
-
MD5
769a1873247d5024808cf7bd70555b01
-
SHA1
2e55be1191affa933438890fc34eb31136bef045
-
SHA256
850932bf796d17da05dc8c531993db6423b56686ff7dc68cc0a802e87f827fad
-
SHA512
2a1b089200374f89728e8203d34c5aa23b1d6519dc6bb662d10dbbd8e65e4247f73abc1b77af8643ff69d07590caf2d5b9148b260e39b84b71b979486b49733b
-
SSDEEP
12288:7KkAmLeYTYzVtPJpBDaY2V52VpKkAmLeYTYzO:OZBtPJHDaXZK
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Default
94.156.65.172:4449
izslwuidilziewad
-
delay
1
-
install
true
-
install_file
AntiMalware.exe
-
install_folder
%AppData%
Signatures
Files
-
850932bf796d17da05dc8c531993db6423b56686ff7dc68cc0a802e87f827fad.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ