Behavioral task
behavioral1
Sample
f3334684daa3ffc361dd25670db258b55c12c318bcc10f2e8e5497b36e9af678.exe
Resource
win7-20240708-en
General
-
Target
f3334684daa3ffc361dd25670db258b55c12c318bcc10f2e8e5497b36e9af678
-
Size
73KB
-
MD5
01e2978080396079938939b319d5fd72
-
SHA1
6984876d90a6373d7ece0f6b2c0b634dd7d38e7b
-
SHA256
f3334684daa3ffc361dd25670db258b55c12c318bcc10f2e8e5497b36e9af678
-
SHA512
6d029839742f071561e6b70e0662e1b16465d588b4e6bb70d8349586ec14c7cfa699682c90c3a6cade4e8bbee240621747cee0fa583d151367f0938589f1c158
-
SSDEEP
1536:TUEkcx4VHsC0SPMVJ7zOsM2CIXH1b//vtHZjQzcX3VclN:TUxcx4GfSPMVJ7zOsMsH1b/ndZjQilY
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Default
86.208.62.200:4449
erkponymudhwpsao
-
delay
1
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
f3334684daa3ffc361dd25670db258b55c12c318bcc10f2e8e5497b36e9af678.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ