Resubmissions

03/05/2024, 03:00

240503-dhq5jsdd51 10

03/05/2024, 02:57

240503-dfyfvafe54 10

General

  • Target

    asd.exe

  • Size

    74KB

  • MD5

    041009ada3c0371d1fcf69a8ed984e3f

  • SHA1

    dd2265310cf6bc59a770609b1cd405488125582d

  • SHA256

    916049b956a4db4cbcbdfb612f7cb13413e4beb2282f6cddee30038378ce3748

  • SHA512

    c408aaed60e453aa965054421cb3a2344fea093504d31af4477d57caebac37660dff61db9aca24057531d69b607fb03314d1e960fcae442abef492f9824464f2

  • SSDEEP

    1536:/5U1AcxqXPC/2PMV1sIM+rYYYPYYYYYYYYYFSYFYY6MYY99bzYYt4IGX1bs/fMQ0:BUKcxqfs2PMV1bM+CX1bssQHBY

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

147.185.221.19:42550

Attributes
  • delay

    1

  • install

    true

  • install_file

    test.exe

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • asd.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections