General
- Target ArrowRAT.rar
- Size 34.6MB
- Sample240504-sj2d8scc76
- SHA256 6e73250921bd8406903b402610fd6a2ce3cf87cfbf69b4d5097c4af00468687e
- MD5 eabb480bc40017b545600709d18994db
- SHA1 4fa85af4297d27f3a0752f29e4a2499307b172dd
- SHA512 8e3b9cbfaa82bca31e00db9450479a05f87d62b49bbb560c267c7cd41c3e11f0f6fd68c0f61242e28253cc76d552078e7c704af7582d1515b73e6fc471dffadb
- SSDEEP 786432:z6ia1AlOHfMfiJG2cCqa3BVCCpBmVhUatvgjmORZiqqMNJ:OiWtGCG2z3BVCCpkV/h7rqqGJ
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
ArrowRAT.rar
Resource
win7-20240220-en
5 signatures
1800 seconds
Behavioral task
behavioral2
Sample
ArrowRAT.rar
Resource
win10-20240404-en
3 signatures
1800 seconds
Behavioral task
behavioral3
Sample
ArrowRAT.rar
Resource
win10v2004-20240419-en
3 signatures
1800 seconds
Behavioral task
behavioral4
Sample
ArrowRAT.rar
Resource
win11-20240419-en
3 signatures
1800 seconds
Malware Config
Extracted
Family
-
asyncrat
Version
-
VenomRAT_HVNC 5.0.4
Botnet
-
System 32
C2
-
127.0.0.1:2322
-
127.0.0.1:14846
-
8.tcp.ngrok.io:2322
-
8.tcp.ngrok.io:14846
Mutex
-
g12l0zuGx
Attributes
-
delay
3
-
install
true
-
install_file
System 32.exe
-
install_folder
%AppData%
aes.plain
Targets
-
- Target ArrowRAT.rar
- Size 34.6MB
- SHA256 6e73250921bd8406903b402610fd6a2ce3cf87cfbf69b4d5097c4af00468687e
- MD5 eabb480bc40017b545600709d18994db
- SHA1 4fa85af4297d27f3a0752f29e4a2499307b172dd
- SHA512 8e3b9cbfaa82bca31e00db9450479a05f87d62b49bbb560c267c7cd41c3e11f0f6fd68c0f61242e28253cc76d552078e7c704af7582d1515b73e6fc471dffadb
- SSDEEP 786432:z6ia1AlOHfMfiJG2cCqa3BVCCpBmVhUatvgjmORZiqqMNJ:OiWtGCG2z3BVCCpkV/h7rqqGJ
- MD5 SHA1 SHA512 SSDEEP
Score3/10