General

  • Target

    virus.exe

  • Size

    74KB

  • Sample

    230930-s6ya4afa54

  • MD5

    3fa0d7f9b4121f780b288f8c0abf7294

  • SHA1

    10f04fef54c73dccd7cc24a5ab5c84731988f5a2

  • SHA256

    c59eb755bf1ae526a437b9be70026c8ba11fa71464ca58ad9c7a940ddb8a061c

  • SHA512

    88721133092c6d18579cedb0104aeb4b085ebef2a7ebd79eb4dc6ecd4da67544adf63160355f704a909d11fd9ba1df8f3be3a777915ee285974a2b957eade819

  • SSDEEP

    1536:gUzkcx4VHsC0SPMVO07RhCIsH1bP/NEhRQzcSLVclN:gUwcx4GfSPMVTNh4H1bPUQDBY

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT v6.0.3 - Cracked By ReverseLabs

Botnet

Default

C2

127.0.0.1:4449

65.21.8.16:4449

Mutex

frztevozbilaw

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      virus.exe

    • Size

      74KB

    • MD5

      3fa0d7f9b4121f780b288f8c0abf7294

    • SHA1

      10f04fef54c73dccd7cc24a5ab5c84731988f5a2

    • SHA256

      c59eb755bf1ae526a437b9be70026c8ba11fa71464ca58ad9c7a940ddb8a061c

    • SHA512

      88721133092c6d18579cedb0104aeb4b085ebef2a7ebd79eb4dc6ecd4da67544adf63160355f704a909d11fd9ba1df8f3be3a777915ee285974a2b957eade819

    • SSDEEP

      1536:gUzkcx4VHsC0SPMVO07RhCIsH1bP/NEhRQzcSLVclN:gUwcx4GfSPMVTNh4H1bPUQDBY

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks