General
-
Target
Client.exe
-
Size
73KB
-
MD5
72be20fab9bcccfdf8dd9b4b57e358b1
-
SHA1
852c3f5ac59b188561ca9701aaa34c8a877bfae0
-
SHA256
ff98728bb7bfa7fdd9f1da1f6b45fe64fb46b4bd7fef58634fad01d3b37ec155
-
SHA512
c2a4e9674e85f0d7b474aa53f540ef1a8c0aea97ca020560a148c0915731fdfd84dc957e790d54e47d2b61fe75714960b902096ef6ade1f3478d6edc8957f6c5
-
SSDEEP
1536:LUUPcxVteCW7PMVee9VdQkhDIyH1bf/5o7nRQzc33VclN:LUmcxV4x7PMVee9VdQgH1bfcRQylY
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Default
193.161.193.99:52920
193.161.193.99:3333
nfpzlqliopdz
-
delay
1
-
install
false
-
install_folder
%AppData%
Signatures
-
Asyncrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Client.exe
Files
-
Client.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ