General

  • Target

    Windows Security Notification System.exe

  • Size

    74KB

  • MD5

    fa049d61ecd25009c4a9aab224005335

  • SHA1

    599563445a7f60d140b826203ce675b32e3a6132

  • SHA256

    a2b4a28e8c9a3269c39788e675f21776db360e19c9091502deea3e41255aecc2

  • SHA512

    1e155a3ebed4c87ac36e472df9277eaf2aa6c10713836bddd643801d6a35a91aebe81f2de5da986c8a546e2ea99d6ce38574bb5c17f9e4f5aba996e2210bb18e

  • SSDEEP

    1536:nUEkcx4VHsC0SPMVAWKDZIsH1b1QTqLDQzc2LVclN:nUxcx4GfSPMVAbnH1b1+qLDQPBY

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

132.145.75.68:3965

132.145.75.68:2885

Mutex

aypvlmvwmzjatxzuk

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain
1
ACTNb8aS3MOL8PwNDs5x0EHTupUOzsDo

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Windows Security Notification System.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.