Overview

overview

10

Static

static

10

penisware.exe

windows7-x64

10

penisware.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    penisware.exe

  • Size

    74KB

  • MD5

    315cfea4df6af50734fc2405ece1e4fb

  • SHA1

    cc0ff1cdbb9782d9b89928f5e4cd974af3721b0a

  • SHA256

    6ea3a5ebedbe3a2c550261a4a2949c4304584fd8cef0ba6189c57ccd6cad1e8c

  • SHA512

    ce70a8905f6c1bbf9045d7dd1d799bb3dfbf2e26282f58adc06790d7887b979e0f52c262913b7ded3b953fd2cffd986c57f5b62ad2bae5aac71e45d8b58a3e23

  • SSDEEP

    1536:ZUv8cxBPowCH6PMV+wPgIdH1bI/PVducQzc2LVclN:ZUEcxBPXI6PMV+EjH1bImcQPBY

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

147.185.221.19:25944

Mutex

jrukmdndzaa

Attributes
  • delay

    1

  • install

    true

  • install_file

    penishost.exe

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • penisware.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections