Behavioral task
behavioral1
Sample
c43396cd1bd4199d544b2abbcc33d5f06af2807258bce6010912efefc6adb0ba.exe
Resource
win7-20240708-en
General
-
Target
c43396cd1bd4199d544b2abbcc33d5f06af2807258bce6010912efefc6adb0ba
-
Size
73KB
-
MD5
7317d31ebc5ee785cf499951c5a6593b
-
SHA1
b49ac40311cb40fe70d5457c73fb998b6830b809
-
SHA256
c43396cd1bd4199d544b2abbcc33d5f06af2807258bce6010912efefc6adb0ba
-
SHA512
c6288511576dfc631ac32f27b750c713d5f71bb4cbcbc2939f5718476b04ba1a82fe318898dac80f9c7f8a8bae74cdc6e6b00246148e122471af968fae8a1328
-
SSDEEP
1536:TU1gcxe1eHCZWPMVKe9VdQkhDIyH1bf/paLQzc33VclN:TUKcxe1ayWPMVKe9VdQgH1bfoQSlY
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Default
86.208.62.200:4449
ixdcghsoqhisxhak
-
delay
1
-
install
true
-
install_file
test.exe
-
install_folder
%AppData%
Signatures
Files
-
c43396cd1bd4199d544b2abbcc33d5f06af2807258bce6010912efefc6adb0ba.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ