Overview
overview
10Static
static
10Client - C...0).exe
windows11-21h2-x64
10Client - C...1).exe
windows11-21h2-x64
10Client - C...2).exe
windows11-21h2-x64
10Client - C...3).exe
windows11-21h2-x64
10Client - C...4).exe
windows11-21h2-x64
10Client - C...5).exe
windows11-21h2-x64
10Client - C...6).exe
windows11-21h2-x64
10Client - C...7).exe
windows11-21h2-x64
10Client - C...8).exe
windows11-21h2-x64
10Client - C...9).exe
windows11-21h2-x64
10Client - Copy (2).exe
windows11-21h2-x64
10Client - C...0).exe
windows11-21h2-x64
10Client - C...1).exe
windows11-21h2-x64
10Client - C...2).exe
windows11-21h2-x64
10Client - C...3).exe
windows11-21h2-x64
10Client - C...4).exe
windows11-21h2-x64
10Client - C...5).exe
windows11-21h2-x64
10Client - C...6).exe
windows11-21h2-x64
10Client - C...7).exe
windows11-21h2-x64
10Client - C...8).exe
windows11-21h2-x64
10Client - C...9).exe
windows11-21h2-x64
10Client - Copy (3).exe
windows11-21h2-x64
10Client - C...0).exe
windows11-21h2-x64
10Client - C...1).exe
windows11-21h2-x64
10Client - Copy (4).exe
windows11-21h2-x64
10Client - Copy (5).exe
windows11-21h2-x64
10Client - Copy (6).exe
windows11-21h2-x64
10Client - Copy (7).exe
windows11-21h2-x64
10Client - Copy (8).exe
windows11-21h2-x64
10Client - Copy (9).exe
windows11-21h2-x64
10Client - Copy.exe
windows11-21h2-x64
10Client.exe
windows11-21h2-x64
10Analysis
- max time kernel
899s - max time network
904s - platform
windows11-21h2_x64 - resource
win11-20241007-en - resource tags
arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system - submitted
08/01/2025, 00:42
Behavioral task
behavioral1
Sample
Client - Copy (10).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral2
Sample
Client - Copy (11).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral3
Sample
Client - Copy (12).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral4
Sample
Client - Copy (13).exe
Resource
win11-20241023-en
windows11-21h2-x64
Behavioral task
behavioral5
Sample
Client - Copy (14).exe
Resource
win11-20241023-en
windows11-21h2-x64
Behavioral task
behavioral6
Sample
Client - Copy (15).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral7
Sample
Client - Copy (16).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral8
Sample
Client - Copy (17).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral9
Sample
Client - Copy (18).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral10
Sample
Client - Copy (19).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral11
Sample
Client - Copy (2).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral12
Sample
Client - Copy (20).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral13
Sample
Client - Copy (21).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral14
Sample
Client - Copy (22).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral15
Sample
Client - Copy (23).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral16
Sample
Client - Copy (24).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral17
Sample
Client - Copy (25).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral18
Sample
Client - Copy (26).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral19
Sample
Client - Copy (27).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral20
Sample
Client - Copy (28).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral21
Sample
Client - Copy (29).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral22
Sample
Client - Copy (3).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral23
Sample
Client - Copy (30).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral24
Sample
Client - Copy (31).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral25
Sample
Client - Copy (4).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral26
Sample
Client - Copy (5).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral27
Sample
Client - Copy (6).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral28
Sample
Client - Copy (7).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral29
Sample
Client - Copy (8).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral30
Sample
Client - Copy (9).exe
Resource
win11-20241007-en
windows11-21h2-x64
Behavioral task
behavioral31
Sample
Client - Copy.exe
Resource
win11-20241007-en
windows11-21h2-x64
General
- Target Client - Copy (16).exe
- Size 74KB
- Sample250108-a2bmesykbn
- SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
- MD5 518cefe78569449a64ba9fcc57722fc3
- SHA1 f5a37814247e38571eea79a509b81599b95868fd
- SHA512 88a17a768af4800e7b6f8f96cfb7de4788b5eceae6241dba694cf071410365508bb7982761bbbd518ada6e4db713e591b800a3365e1dd1daddc3918f09661958
- SSDEEP 1536:EUEkcx4VHsC0SPMV7e9VdQuDI6H1bf/DtQzc2LVclN:EUxcx4GfSPMV7e9VdQsH1bfZQPBY
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Extracted
-
asyncrat
-
Venom RAT + HVNC + Stealer + Grabber v6.0.3
-
Default
-
159.203.126.35:22279
-
hnfkoikowllyvsdhi
-
delay
1
-
install
false
-
install_folder
%AppData%
Signatures
- Asyncrat family
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe 1744 Client - Copy (16).exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1744 Client - Copy (16).exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1744 Client - Copy (16).exe