General
-
Target
Client.exe
-
Size
74KB
-
MD5
0b601635bd4ee178cc30afe7d4e72051
-
SHA1
dbec5361eb7e64902441fd8d205e1a96d191d735
-
SHA256
2d1f81c62216894d4840e544b0c3c8882364cfa730946d0cd02d2ce22694e50f
-
SHA512
d5499c55852a8c91a8b79e3d91202897ce6364408b3927fabbb8a20067fa8cd655973e8e1ca414a01dc67a92b0186a0156203c2f1a6b17e32b0e4e28d0b2b946
-
SSDEEP
1536:8UUPcxVteCW7PMVee9VdQuDI6H1bf/Jz/QzcBLVclN:8UmcxV4x7PMVee9VdQsH1bfBDQYBY
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Default
132.145.75.68:3965
132.145.75.68:2885
ftolxmmyozfj
-
delay
1
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
Client.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ