General

  • Target

    6d4614ebd7eb3a1361ecb5196770ef5edf5dc6dd104014412e9cace64c02cd01

  • Size

    86KB

  • Sample

    240111-mkbbjsebbr

  • MD5

    ec86c5dde00fad3ad26b14d744449f26

  • SHA1

    f696a37651c85407a69463d985202f95354f1116

  • SHA256

    6d4614ebd7eb3a1361ecb5196770ef5edf5dc6dd104014412e9cace64c02cd01

  • SHA512

    65123d5002e74adac305f027a830b66a7dd81c23903ff033544827c8f32362bfe37928e75555b4e2998a4ddcb72dde35cb7530f937d8433b4782a609ef3fbf56

  • SSDEEP

    1536:rntG0AI1JfxQ7CqmB9X1bbsTxRjXYBGG03qA+askNpqKmY7Epei9pei:rnWI/x/q8B1bbsTTXYgsAKkWzzIoI

Malware Config

Extracted

Family

asyncrat

Version

VenomRAT_HVNC 5.0.4

Botnet

Venom Clients

C2

rat2024.e3.luyouxia.net:14363

Mutex

G6rPPql9F

Attributes
  • delay

    0

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      6d4614ebd7eb3a1361ecb5196770ef5edf5dc6dd104014412e9cace64c02cd01

    • Size

      86KB

    • MD5

      ec86c5dde00fad3ad26b14d744449f26

    • SHA1

      f696a37651c85407a69463d985202f95354f1116

    • SHA256

      6d4614ebd7eb3a1361ecb5196770ef5edf5dc6dd104014412e9cace64c02cd01

    • SHA512

      65123d5002e74adac305f027a830b66a7dd81c23903ff033544827c8f32362bfe37928e75555b4e2998a4ddcb72dde35cb7530f937d8433b4782a609ef3fbf56

    • SSDEEP

      1536:rntG0AI1JfxQ7CqmB9X1bbsTxRjXYBGG03qA+askNpqKmY7Epei9pei:rnWI/x/q8B1bbsTTXYgsAKkWzzIoI

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

MITRE ATT&CK Matrix

Tasks