Overview

overview

10

Static

static

10

61c1c1ea4c...61.exe

windows7_x64

10

61c1c1ea4c...61.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    61c1c1ea4c4ffb7fa6c1c707c8d41c61
  • Size 65KB
  • Sample211129-fe5jwaeef5
  • SHA256 5d355666219db06acc93d01c0973c0c0a5db514b5af2c43dd7d97075d7b78914
  • MD5 SHA1 SHA512
Score
10/10
ratelizaasyncrat

Malware Config

Extracted

Family

  • asyncrat

Version

  • VenomRAT_HVNC 5.0.4

Botnet

  • Eliza

C2

  • 74.119.195.9:4821

Mutex

  • ElizaVenom

Attributes
  • anti_vm

    false

  • bsod

    false

  • delay

    6

  • install

    true

  • install_file

    msvc.exe

  • install_folder

    %AppData%

  • pastebin_config

    null

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat

File Explorer

  • 61c1c1ea4c4ffb7fa6c1c707c8d41c61
    .exe 65KB

61c1c1ea4c4ffb7fa6c1c707c8d41c61

  • SHA256 5d355666219db06acc93d01c0973c0c0a5db514b5af2c43dd7d97075d7b78914
  • MD5 SHA1 SHA512
windowsx86

  • Async RAT payload

    rat