Overview

overview

10

Static

static

10

Client.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Client.exe

  • Size

    63KB

  • Sample

    240531-bckz8sgh3s

  • MD5

    37b8d84468f1ca2c57ed419be256476e

  • SHA1

    8807c4d29a45acb69cd8851d07ed2eae3ef8a5a8

  • SHA256

    9261f0bf10627dbe394d65266b9dd6d3150bbfdc83b279739a74f20979a4d4d7

  • SHA512

    2fc7446fa7d9c3416c5818ba3eab72ed5d71ac2052a4227287531290bfa6c488da3674e9cca8584eea3fcfd67fc47094e231992eda6c9a9a67da5497d7e54a50

  • SSDEEP

    1536:AhIBLTM3Ufc0cMdmeeiIVrGbbXwcwzWGGDpqKmY7:AhIBLTM3Ufc6d/eXGbbXkQgz

Score
10/10
asyncratvenom clientsrat

Malware Config

Extracted

Family

asyncrat

Version

5.0.5

Botnet

Venom Clients

C2

index-hon.gl.at.ply.gg:4610

Mutex

Venom_RAT_HVNC_Mutex_Venom RAT_HVNC

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Client.exe

    • Size

      63KB

    • MD5

      37b8d84468f1ca2c57ed419be256476e

    • SHA1

      8807c4d29a45acb69cd8851d07ed2eae3ef8a5a8

    • SHA256

      9261f0bf10627dbe394d65266b9dd6d3150bbfdc83b279739a74f20979a4d4d7

    • SHA512

      2fc7446fa7d9c3416c5818ba3eab72ed5d71ac2052a4227287531290bfa6c488da3674e9cca8584eea3fcfd67fc47094e231992eda6c9a9a67da5497d7e54a50

    • SSDEEP

      1536:AhIBLTM3Ufc0cMdmeeiIVrGbbXwcwzWGGDpqKmY7:AhIBLTM3Ufc6d/eXGbbXkQgz

    Score
    10/10
    asyncratvenom clientsrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks