Overview

overview

10

Static

static

10

d4aa2df36d...68.exe

windows7-x64

10

d4aa2df36d...68.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    11669565736.zip
  • Size 36KB
  • Sample230906-mk49maeg43
  • SHA256 b9b2555bb99c5d4be797e8505788dd68a48c8d5e38ad1731966b69a9ef6ed3a5
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

  • asyncrat

Version

  • Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

  • Default

Mutex

  • iwdrfgrfew

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

  • pastebin_config

    https://pastebin.com/raw/5y7ghDpz

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 11669565736.zip
    .zip 36KB
  • d4aa2df36d10f889dfa999d4e0d27ebdb8a6641f095a43397539ebad1d247068
    .exe 74KB

11669565736.zip

  • SHA256 b9b2555bb99c5d4be797e8505788dd68a48c8d5e38ad1731966b69a9ef6ed3a5
  • MD5 SHA1 SHA512 SSDEEP
Password
infected