General

  • Target

    download.exe

  • Size

    74KB

  • MD5

    fed81eeef57157d3ed1f399f90d2ce9a

  • SHA1

    65ca88528b360b26cfa1a68a0f9950e536d40e70

  • SHA256

    c61be8a80e413a855e38a6269b611f6c4b86718e0e0aea9964772ab11c836a74

  • SHA512

    37bb62fa840ebe7d11bd9c8182d695d37f23896362ee0215b9087a741ce8ee9f9633331113bd3d980d9406657bf4d1241cfc69a5d5fe5e576ac5bcb7829e07f5

  • SSDEEP

    1536:gUUPcxVteCW7PMVwEh3kLuaIsH1bz8zRQzcyLVclN:gUmcxV4x7PMVXfAH1bzGQjBY

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

181.41.200.232:4000

Mutex

mvybdhsuwikcu

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • download.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections