Overview

overview

10

Static

static

3

538898db1b...dc.exe

windows7-x64

10

538898db1b...dc.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    538898db1be8c6ce5a8d8fd0163ba3968ef350b2f09521348c79ca480b6e52dc

  • Size

    216KB

  • Sample

    231205-vb39zace7w

  • MD5

    bad1cdd965e866302bfbbbc2a169fd29

  • SHA1

    450a46eb04d12aee2301bb78d3f6ce7f99fe1cc7

  • SHA256

    538898db1be8c6ce5a8d8fd0163ba3968ef350b2f09521348c79ca480b6e52dc

  • SHA512

    d0a60fe0d003bd424bce2d54a5b2d5a6d104e9771e2de2007ade371a72b7e95e2f7146e4434f8282516ceb4919ae50bfc185ec372df5b62064e78396521e9872

  • SSDEEP

    6144:dyM5XnCIPRFewED7QtJiR5VL+AwOrwgXdbhw166PR:kM5XnCIpVE6JiNLfwOrwLPR

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

8.130.84.209:4449

Mutex

ytgqvkeijwgcw

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      538898db1be8c6ce5a8d8fd0163ba3968ef350b2f09521348c79ca480b6e52dc

    • Size

      216KB

    • MD5

      bad1cdd965e866302bfbbbc2a169fd29

    • SHA1

      450a46eb04d12aee2301bb78d3f6ce7f99fe1cc7

    • SHA256

      538898db1be8c6ce5a8d8fd0163ba3968ef350b2f09521348c79ca480b6e52dc

    • SHA512

      d0a60fe0d003bd424bce2d54a5b2d5a6d104e9771e2de2007ade371a72b7e95e2f7146e4434f8282516ceb4919ae50bfc185ec372df5b62064e78396521e9872

    • SSDEEP

      6144:dyM5XnCIPRFewED7QtJiR5VL+AwOrwgXdbhw166PR:kM5XnCIpVE6JiNLfwOrwLPR

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks