Behavioral task
behavioral1
Sample
ONEFix.exe
Resource
win7-20240903-en
General
-
Target
ONEFix.rar
-
Size
32KB
-
MD5
88a947c116f1ef7647dbf9cf0472f59a
-
SHA1
b0a156e4c249ec89e2cc4c9eab09e1905d35836a
-
SHA256
223bba409b781e7f0416284708c649b0382a1b10fd012507975365d5780bdd72
-
SHA512
37bfdfc40c735c068852056201f32ab8d80d946d632d697d1d72a78d5f2004923879233e8465d8bcfc190f7ec768105e67645d0db46712b48acc1e415a4fe3ec
-
SSDEEP
768:cPbArXk2g9I3/4ZJckeB6+7/38c/6C6lj4LvqgEOyUXUdYq20Zck:6AInzLN+n/6Caj4DSOd8Y7k
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Default
ahzlvriurjqtgdq
-
c2_url_file
https://paste.ee/r/7pGL0uGm/0
-
delay
1
-
install
true
-
install_file
System.exe
-
install_folder
%AppData%
Signatures
Files
-
ONEFix.rar.rar
-
ONEFix.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ