Behavioral task
behavioral1
Sample
MicroStrap.exe
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
MicroStrap.exe
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
MicroStrap.exe
Resource
android-x64-arm64-20240910-en
General
-
Target
MicroStrap.exe
-
Size
74KB
-
MD5
9785b81af0d8b024dadd31659a3a2d24
-
SHA1
14f4539dc755b69ad28f9c1953aeec3620669588
-
SHA256
fec63e2ee9e830df5298bd72464fe6753a60a5ef14bd3023e9ab99260878b3df
-
SHA512
002df3d93cde212d4a9678f167201599d5e874defe15f2e46494d72f442692bf62a8fcfa226963f0575335f0b1062a61508ca143b95614eef4a6d7cd563c5120
-
SSDEEP
1536:OUKkcx9pXCTyPMVEZ8kyIgH1bO/zeoBDQzcOLVclN:OUDcx958yPMVEZ81H1bOLRDQHBY
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Default
195.88.218.126:2404
rnxgsvfqmra
-
delay
1
-
install
true
-
install_file
svchost.exe
-
install_folder
%AppData%
Signatures
Files
-
MicroStrap.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ