Analysis
- max time kernel
148s - max time network
137s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
07/08/2026, 15:17
Behavioral task
behavioral1
Sample
vgc.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target vgc.exe
- Size 78KB
- Sample260807-sn6jrayakc
- SHA256 f7fe8ead1851a07adf8ded3a2a84ebc2aef65683346362f5a2e711ee0c8c537e
- MD5 7ec7afe7da90bbeaae5452d745883890
- SHA1 6919bf6db3bf1ae5baaef301868b5ae5f7362737
- SHA512 eb336455e79dfe47e45f77b7f2b6b59b386e44136e4916456a1c5e8afc5cc59ba82421c765bedab28699510f9a33f605ca1e28ddfc0c21dd28d557a79e27eb6c
- SSDEEP 1536:UUqkcxg8xNCzyPMV5s44xCYYYHYYYYYYYYYFKYFYY6MYY99bzYYtUITH1b8/uS/y:UUjcxg8vcyPMV5r44H1b8WyoQrVy7Taa
- TLSH T1FA733B093BA88D35E26E8BB9FCF253070EF4D5176112CD9E2CC450DD9A66BC54A037EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
asyncrat
Version
-
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Botnet
-
vgc
Mutex
-
sdsadadasdada
Attributes
-
delay
3
-
install
true
-
install_file
vgc.exe
-
install_folder
%AppData%
-
local_host
127.0.0.1
-
private_ip
192.168.1.103
aes.plain
Signatures
- Suspicious use of AdjustPrivilegeToken 43 IoCs
description pid Process Token: SeDebugPrivilege 4344 vgc.exe Token: SeIncreaseQuotaPrivilege 4344 vgc.exe Token: SeSecurityPrivilege 4344 vgc.exe Token: SeTakeOwnershipPrivilege 4344 vgc.exe Token: SeLoadDriverPrivilege 4344 vgc.exe Token: SeSystemProfilePrivilege 4344 vgc.exe Token: SeSystemtimePrivilege 4344 vgc.exe Token: SeProfSingleProcessPrivilege 4344 vgc.exe Token: SeIncBasePriorityPrivilege 4344 vgc.exe Token: SeCreatePagefilePrivilege 4344 vgc.exe Token: SeBackupPrivilege 4344 vgc.exe Token: SeRestorePrivilege 4344 vgc.exe Token: SeShutdownPrivilege 4344 vgc.exe Token: SeDebugPrivilege 4344 vgc.exe Token: SeSystemEnvironmentPrivilege 4344 vgc.exe Token: SeRemoteShutdownPrivilege 4344 vgc.exe Token: SeUndockPrivilege 4344 vgc.exe Token: SeManageVolumePrivilege 4344 vgc.exe Token: 33 4344 vgc.exe Token: 34 4344 vgc.exe Token: 35 4344 vgc.exe Token: 36 4344 vgc.exe Token: SeIncreaseQuotaPrivilege 4344 vgc.exe Token: SeSecurityPrivilege 4344 vgc.exe Token: SeTakeOwnershipPrivilege 4344 vgc.exe Token: SeLoadDriverPrivilege 4344 vgc.exe Token: SeSystemProfilePrivilege 4344 vgc.exe Token: SeSystemtimePrivilege 4344 vgc.exe Token: SeProfSingleProcessPrivilege 4344 vgc.exe Token: SeIncBasePriorityPrivilege 4344 vgc.exe Token: SeCreatePagefilePrivilege 4344 vgc.exe Token: SeBackupPrivilege 4344 vgc.exe Token: SeRestorePrivilege 4344 vgc.exe Token: SeShutdownPrivilege 4344 vgc.exe Token: SeDebugPrivilege 4344 vgc.exe Token: SeSystemEnvironmentPrivilege 4344 vgc.exe Token: SeRemoteShutdownPrivilege 4344 vgc.exe Token: SeUndockPrivilege 4344 vgc.exe Token: SeManageVolumePrivilege 4344 vgc.exe Token: 33 4344 vgc.exe Token: 34 4344 vgc.exe Token: 35 4344 vgc.exe Token: 36 4344 vgc.exe