General
-
Target
8d27369ffa8b29d561fa9daf485be14d2fc00287bb1c69d4c84d514891c8db5e
-
Size
74KB
-
Sample
240818-xjhpcaycqf
-
MD5
0dfa83a82f6418c73406d78296de61be
-
SHA1
dd7eceef8a434c43e0751e180bf714e08771d336
-
SHA256
8d27369ffa8b29d561fa9daf485be14d2fc00287bb1c69d4c84d514891c8db5e
-
SHA512
9a4b026250b18c29ab7dd48203f321c2ef2f12695bd2dcb52ebbc15001c8ddf019d5a7e04da056c50c1881ce269d1810259bf6d04b61f471e8751b7192fc73d4
-
SSDEEP
1536:dU40cxhzjBCViPMVSe9VdQuDI6H1bf/6hQzceLVclN:dU1cxhzVCiPMVSe9VdQsH1bfoQ3BY
Behavioral task
behavioral1
Sample
8d27369ffa8b29d561fa9daf485be14d2fc00287bb1c69d4c84d514891c8db5e.exe
Resource
win7-20240705-en
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Default
185.252.232.158:7812
64.23.232.116:7812
vsvf
-
delay
1
-
install
true
-
install_file
Windows Security Health Service.exe
-
install_folder
%AppData%
Targets
-
-
Target
8d27369ffa8b29d561fa9daf485be14d2fc00287bb1c69d4c84d514891c8db5e
-
Size
74KB
-
MD5
0dfa83a82f6418c73406d78296de61be
-
SHA1
dd7eceef8a434c43e0751e180bf714e08771d336
-
SHA256
8d27369ffa8b29d561fa9daf485be14d2fc00287bb1c69d4c84d514891c8db5e
-
SHA512
9a4b026250b18c29ab7dd48203f321c2ef2f12695bd2dcb52ebbc15001c8ddf019d5a7e04da056c50c1881ce269d1810259bf6d04b61f471e8751b7192fc73d4
-
SSDEEP
1536:dU40cxhzjBCViPMVSe9VdQuDI6H1bf/6hQzceLVclN:dU1cxhzVCiPMVSe9VdQsH1bfoQ3BY
-
Async RAT payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-