Overview

overview

10

Static

static

1

Client.bat

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Client.bat

  • Size

    285KB

  • Sample

    240528-rqp44sgg8x

  • MD5

    f67067547389ccbf6c499fb8a5434c0f

  • SHA1

    aac0459c65379f14c9b4adf4b917024d0caa0f39

  • SHA256

    941e89f94ba5236703787ec141060394684573c413822ed4b67987b7311838e3

  • SHA512

    21b7fe589d84cb3a25f7e02f849252a9751f7b3a45edcef2527a5926c898c1cd61ebca4d8fc3d6b0aa05c3ad3869a65b54db69af9dbb2ffec09b68227fc85dae

  • SSDEEP

    6144:WwhNRWvScXvL0SIdc96ZzlVGsk1/RnLkCrvmeIu:xh7gL0SIC6J3GrR4cdIu

Score
10/10
asyncratdefaultexecutionrat

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

127.0.0.1:38173

Mutex

mlpararhqpnf

Attributes
  • delay

    1

  • install

    true

  • install_file

    azari.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Client.bat

    • Size

      285KB

    • MD5

      f67067547389ccbf6c499fb8a5434c0f

    • SHA1

      aac0459c65379f14c9b4adf4b917024d0caa0f39

    • SHA256

      941e89f94ba5236703787ec141060394684573c413822ed4b67987b7311838e3

    • SHA512

      21b7fe589d84cb3a25f7e02f849252a9751f7b3a45edcef2527a5926c898c1cd61ebca4d8fc3d6b0aa05c3ad3869a65b54db69af9dbb2ffec09b68227fc85dae

    • SSDEEP

      6144:WwhNRWvScXvL0SIdc96ZzlVGsk1/RnLkCrvmeIu:xh7gL0SIC6J3GrR4cdIu

    Score
    10/10
    asyncratdefaultexecutionrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks