General

  • Target

    Explorer.exe

  • Size

    125KB

  • MD5

    ddc8880f59a4722297fad25262f4860f

  • SHA1

    4d8960aafca95a9688981dbb74daf3dc1389fd42

  • SHA256

    4881fc42918b63315ee65d81273caa919de148e8f0d36eccebe613054944ba78

  • SHA512

    55e5547a50ec6c435aad977b829c44cd63416dddf41bc4aff392cae3ef8db72462005fbed4e0c704a949e397fa6c652751f874d243c61234ac2d0a5382f6a4b1

  • SSDEEP

    3072:HUbcx2Bq2PMVZA6CH1bvmTh1Q+bH0hLNtAY:HKq2PMVhCVbC/UTK

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

Mutex

azhqynffcsgzagl

Attributes
  • delay

    1

  • install

    true

  • install_file

    Explorer.exe

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Explorer.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections