Overview

overview

10

Static

static

1

15.bat

windows7-x64

1

15.bat

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15.bat

  • Size

    60KB

  • Sample

    240420-jyts9scb59

  • MD5

    1bf971e48ba0ca904319be9147a96c33

  • SHA1

    75078fd8b6a000b848eb3f372e5f84fb58d5b98e

  • SHA256

    74742f3e892f02c91b2f2dd9e1547ffe42681bb755b0f28b2dd602afb46af39e

  • SHA512

    e24d8d46a962c1d659a742a1926c6628f9e88268449b36a93bba5def5390eca141903e329afd3eda70f79cc391f8391e9f15639918addc923819a3efe3dcc6d0

  • SSDEEP

    1536:pdgEdB7d8SZXy3SMlwVdgC1mKRkm6DUL9:paEdNGSsSR3sKRkrDo

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

193.222.96.128:4449

Mutex

nkvohxapain

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      15.bat

    • Size

      60KB

    • MD5

      1bf971e48ba0ca904319be9147a96c33

    • SHA1

      75078fd8b6a000b848eb3f372e5f84fb58d5b98e

    • SHA256

      74742f3e892f02c91b2f2dd9e1547ffe42681bb755b0f28b2dd602afb46af39e

    • SHA512

      e24d8d46a962c1d659a742a1926c6628f9e88268449b36a93bba5def5390eca141903e329afd3eda70f79cc391f8391e9f15639918addc923819a3efe3dcc6d0

    • SSDEEP

      1536:pdgEdB7d8SZXy3SMlwVdgC1mKRkm6DUL9:paEdNGSsSR3sKRkrDo

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks