General
-
Target
Client.exe
-
Size
73KB
-
MD5
f5f6281bdd8312649df47aa5ff51817b
-
SHA1
7dbfee0746f5fff27fe4aef4689655bb95ceec9b
-
SHA256
c01d9f0b0e36df6209dd32216dc5c23732de1ee7c8c5d94532216d1725573ba5
-
SHA512
5789255bd6d9252fff6b9aa4a3d83f8de3f75f289a1829678b6f425811491b1c6ff749600e5e115e3635105106307a41041aedbaa5bb10e4a7b998440b3fe9b0
-
SSDEEP
1536:YUN8cxQFvCr6PMVWe9VdQkhDIyH1bf/lOQzcX3VclN:YUOcxQxs6PMVWe9VdQgH1bfNOQilY
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Default
homiplaglliddnwuc
-
delay
1
-
install
true
-
install_file
Adobe Updater.exe
-
install_folder
%AppData%
-
pastebin_config
https://pastebin.com/raw/8haaGvJp
Signatures
-
Asyncrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Client.exe
Files
-
Client.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ