General

  • Target

    47e1c966601d2001a4802d675f8e7896bceac04b9cfc2a8c69a16b5102ceb9b7

  • Size

    65KB

  • Sample

    240111-mkbbjsebbq

  • MD5

    bc58c0b0cd2ad2a78151125ffb6a8dd9

  • SHA1

    f5b92174953d3d1ed25e1b5701d5ff9dc4c635f9

  • SHA256

    47e1c966601d2001a4802d675f8e7896bceac04b9cfc2a8c69a16b5102ceb9b7

  • SHA512

    a29f4c7759684d460af0cac132295f753903e5584c70538e1786414f13360536921d54213b74ac4b57091c5784c5fbc09dfbaebe2418b9f1a7da7f03faf9dd24

  • SSDEEP

    1536:rntG0AI1JfxQ7CqmB9x1bbsTxRjXYBGG03qA+askNpqKmY7:rnWI/x/q8n1bbsTTXYgsAKkWz

Malware Config

Extracted

Family

asyncrat

Version

VenomRAT_HVNC 5.0.4

Botnet

Venom Clients

C2

rat2024.e3.luyouxia.net:14363

Mutex

G6rPPql9F

Attributes
  • delay

    0

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      47e1c966601d2001a4802d675f8e7896bceac04b9cfc2a8c69a16b5102ceb9b7

    • Size

      65KB

    • MD5

      bc58c0b0cd2ad2a78151125ffb6a8dd9

    • SHA1

      f5b92174953d3d1ed25e1b5701d5ff9dc4c635f9

    • SHA256

      47e1c966601d2001a4802d675f8e7896bceac04b9cfc2a8c69a16b5102ceb9b7

    • SHA512

      a29f4c7759684d460af0cac132295f753903e5584c70538e1786414f13360536921d54213b74ac4b57091c5784c5fbc09dfbaebe2418b9f1a7da7f03faf9dd24

    • SSDEEP

      1536:rntG0AI1JfxQ7CqmB9x1bbsTxRjXYBGG03qA+askNpqKmY7:rnWI/x/q8n1bbsTTXYgsAKkWz

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

MITRE ATT&CK Matrix

Tasks