General

  • Target

    Client2323.rar

  • Size

    28KB

  • Sample

    240426-vfdj4sgh2w

  • MD5

    af1d6373e3f6fff137cef9949b5bfe1f

  • SHA1

    d3505ab0e80db3f8de1852bf7bab11750b0354b1

  • SHA256

    133c53c786bc5e843fcc6f39e77a1c4b1c87abaed9260e6a1ed971446ba37359

  • SHA512

    0a151b6305dfebde1ba0fd90b59ac17b9a67fc7a8d58fe6fbcb792fc4da0b611e9576b8c636d84a00b616e452478b1515c8e592a1920c768a5a21769b07e54b8

  • SSDEEP

    768:VuMz0JZ/p20XxJAZm6+7Ku8fENizoSfCl3a1vmSwHPLNYxox9:VuoUNh6+7KZcNiyl3aFrwHPLNYxoT

Malware Config

Extracted

Family

asyncrat

Version

5.0.5

Botnet

Venom Clients

C2

192.168.32.130:4449

Mutex

Venom_RAT_HVNC_Mutex_Venom RAT_HVNC

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Client2323.exe

    • Size

      63KB

    • MD5

      03a63dd23a00a403ccd90d1cdc8059a3

    • SHA1

      4278cdbe3c76b829431b7b173231b5454c217aab

    • SHA256

      144b3e43975e1f6973e8af2564d6d6a59b881ff126bdbbbae59ff8bffe78e64c

    • SHA512

      465523f5a65bb51a47dd35eea68319639090942a327eeda8c196ae86a6908711c76b4b7812fdd657d347764064b4547b896061b7eb3ed3116278a744352ec741

    • SSDEEP

      1536:+hB5LrUwk4XO01V6g4CaUlpz2LWGbb7whuUTcGPCpqKmY7:+hB5LrUwk4XVVB4H4pLGbb74nHBz

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

MITRE ATT&CK Matrix

Tasks