General

  • Target

    38e87226f9be912abc4984478d4d5ef4f008a936cf03d313e7d4588bc8c6d1d2

  • Size

    3.0MB

  • MD5

    02d68259ec66bccf54a0e65d2f58adc6

  • SHA1

    e97a2f6f59673ba873f3fdf70e47812d0f4d8c91

  • SHA256

    38e87226f9be912abc4984478d4d5ef4f008a936cf03d313e7d4588bc8c6d1d2

  • SHA512

    7b39cfcc91795a7d900f9e7cba6f966420e27f24c1a320ef76caea93b6513ff6a9330f9596d7bcdc9d81a23a6564908f4d523d469b10fa21d8d082cc5e64845f

  • SSDEEP

    49152:lGOcVbo6v2NHGLSa9gUBX3B3kNC3H6vUZ0r/NFQ:lGOcm6UGLSm

Malware Config

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • StormKitty payload 1 IoCs
  • Stormkitty family
  • VenomRAT 1 IoCs

    Detects VenomRAT.

  • Venomrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 38e87226f9be912abc4984478d4d5ef4f008a936cf03d313e7d4588bc8c6d1d2
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections