Overview

overview

10

Static

static

10

61c1c1ea4c...61.exe

windows7_x64

10

61c1c1ea4c...61.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    61c1c1ea4c4ffb7fa6c1c707c8d41c61
  • Size 65KB
  • Sample211129-fe5jwaeef5
  • SHA256 5d355666219db06acc93d01c0973c0c0a5db514b5af2c43dd7d97075d7b78914
  • MD5 SHA1 SHA512
Score
10/10
asyncratelizarat

Malware Config

Extracted

Family

  • asyncrat

Version

  • VenomRAT_HVNC 5.0.4

Botnet

  • Eliza

C2

  • 74.119.195.9:4821

Mutex

  • ElizaVenom

Attributes
  • anti_vm

    false

  • bsod

    false

  • delay

    6

  • install

    true

  • install_file

    msvc.exe

  • install_folder

    %AppData%

  • pastebin_config

    null

aes.plain

Targets

    • Target
      61c1c1ea4c4ffb7fa6c1c707c8d41c61
    • Size 65KB
    • SHA256 5d355666219db06acc93d01c0973c0c0a5db514b5af2c43dd7d97075d7b78914
    • MD5 SHA1 SHA512
    Score
    10/10
    asyncratelizarat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks