Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    amongguscheatzz.exe

  • Size

    78KB

  • MD5

    8f82f06c000b9bd71caa9a9c49e13b3d

  • SHA1

    85232144737907d8188ea63cbe1bae5a95f4f11c

  • SHA256

    68c65bb0a96522bac335ba7c2fc03dd7be9b11765c5dde518aa8d35b58aeccb8

  • SHA512

    4b04ae5fa11956670e2a483203117cfa3cf8283d138e3d2b1015a4b0d115cbb745eb0c2a6be39e0ac1bbba78deb9ece3c0f3a43cd34ed6e7f3410490c229ffd5

  • SSDEEP

    1536:NUxQcxHCapCtGPMVcGggyVITH1bE/9idQzcoLVclN:NUOcxHCoeGPMVPggyUH1bEAdQhBY

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

18.197.239.109:4824

18.197.239.109:16321
Mutex

Discord Inc

Attributes
  • delay

    1

  • install

    true

  • install_file

    wsappx.exe

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • amongguscheatzz.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections