General

  • Target

    Client.exe

  • Size

    63KB

  • MD5

    37b8d84468f1ca2c57ed419be256476e

  • SHA1

    8807c4d29a45acb69cd8851d07ed2eae3ef8a5a8

  • SHA256

    9261f0bf10627dbe394d65266b9dd6d3150bbfdc83b279739a74f20979a4d4d7

  • SHA512

    2fc7446fa7d9c3416c5818ba3eab72ed5d71ac2052a4227287531290bfa6c488da3674e9cca8584eea3fcfd67fc47094e231992eda6c9a9a67da5497d7e54a50

  • SSDEEP

    1536:AhIBLTM3Ufc0cMdmeeiIVrGbbXwcwzWGGDpqKmY7:AhIBLTM3Ufc6d/eXGbbXkQgz

Malware Config

Extracted

Family

asyncrat

Version

5.0.5

Botnet

Venom Clients

C2

index-hon.gl.at.ply.gg:4610

Mutex

Venom_RAT_HVNC_Mutex_Venom RAT_HVNC

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections