Behavioral task
behavioral1
Sample
60361aa8fe9ebe14e712d3000fc99853c9e6e270ac739c93d6642b6a03345256.exe
Resource
win7-20241010-en
General
-
Target
60361aa8fe9ebe14e712d3000fc99853c9e6e270ac739c93d6642b6a03345256
-
Size
78KB
-
MD5
8f6e91ec808ff98c078c77a6efb354a9
-
SHA1
a6ab4655de7ca0a6b9cf59a239426ae1cc119539
-
SHA256
60361aa8fe9ebe14e712d3000fc99853c9e6e270ac739c93d6642b6a03345256
-
SHA512
6095ceb96f6e4b18887fb03ee5a1125d6ff4c0e9e8818f3aef43edab0fd9e3c4041b40ffab5ea1f67fa889d61e7b015d6b7a3a41bdb442fd05d33d85aeec7197
-
SSDEEP
1536:dUD0cxVGlCBiPMVRkhh0LsaI7H1bLEEsQzcJNLVclN:dUAcxVMWiPMV+N3H1bLoQsNBY
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Default
127.0.0.1:4449
217.28.134.205:4449
rykxfytjmrxgqtmb
-
delay
1
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
60361aa8fe9ebe14e712d3000fc99853c9e6e270ac739c93d6642b6a03345256.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ