Overview

overview

10

Static

static

10

131sx.exe

windows7-x64

10

131sx.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    131sx.exe

  • Size

    63KB

  • MD5

    8b93723cdaf8c08487ba65f58f13730a

  • SHA1

    4591b149fb72a5eb153242d754ff254154b729b2

  • SHA256

    b6d21573ae8c7cfb8b92f95a5a9c1d8d5d7fa979beb0314debb3c4193bc3f8a7

  • SHA512

    838915a29f59fe8c5822ca0ab93cf90c52649c74f54ae72777a465174f08862583a713b9f7239cc0dfb66abc6fbbe1460cf51a5fbb2cb00f0890fc5fed6c0889

  • SSDEEP

    768:NlNpSSnt7iPDVoiM9J2nt9GXyghbFuubGQ5N1+GSCv7mqb2n5pwH1o0JU7KMdMhv:Xpt8OOGXfcQ5NsGbbowRuKGKDpqKmY7

Score
10/10
ratvenom clientsasyncrat

Malware Config

Extracted

Family

asyncrat

Version

5.0.5

Botnet

Venom Clients

C2

agent-thumbnail.gl.at.ply.gg:21402:5056

Mutex

Venom_RAT_HVNC_Mutex_Venom RAT_HVNC

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 131sx.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections