Overview

overview

10

Static

static

10

Client.exe

windows7-x64

10

Client.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    New WinRAR archive.rar

  • Size

    32KB

  • MD5

    dd34caf37273ab35ffa42aeecce5d1b5

  • SHA1

    4d74f615924467af1ef02c8cacb58d444652987c

  • SHA256

    1cf88267e325103ed79f5ce72d6668da5d5575546f4cf9258a2718a3802ac92a

  • SHA512

    d4375e2507f3ae14363fb4ba835604fee4d3d915d012ced87323025af6be50c4975473e6674e1d9f630b30e11349f4e092318a7ff9126813a461eb77faefb190

  • SSDEEP

    768:sSyJ1ubLM45auCg19Xa4qSJ6dty1AT311rU:sBa7XDTq4qSs7EAT7rU

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

127.0.0.1:4449

127.0.0.1:7000

217.105.23.4:4449

217.105.23.4:7000
Mutex

yrnxijhuaqjbkum

Attributes
  • delay

    3

  • install

    true

  • install_file

    UpdateManager.exe

  • install_folder

    %Temp%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • New WinRAR archive.rar
    .rar
  • Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections