General

  • Target

    ClientAny.exe

  • Size

    74KB

  • Sample

    240627-v8vn4avbjq

  • MD5

    9dabe66b91d1121c2e4ead7f006eb095

  • SHA1

    8f9be3dcf0fe25aeb9b291455199990d3d189f66

  • SHA256

    1d8219f967ab56f527a176a07a91f447b7ee335103e5cbac73b1bacc03cbab4d

  • SHA512

    0c65b35f59dc3dce6d4951800696573619e2e8cbff6f623f2f1d39b740eb79495515436cd82bcf38d315688f456424bd03cd8bc32fe7389eb1b5d25921bc0a31

  • SSDEEP

    1536:4UUPcxVteCW7PMVgOyWIeH1bc/buLLhaQzcaLVclN:4UmcxV4x7PMVLyOH1bcMLgQLBY

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

194.55.186.155:2424

Mutex

qncatmcnnrwluo

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      ClientAny.exe

    • Size

      74KB

    • MD5

      9dabe66b91d1121c2e4ead7f006eb095

    • SHA1

      8f9be3dcf0fe25aeb9b291455199990d3d189f66

    • SHA256

      1d8219f967ab56f527a176a07a91f447b7ee335103e5cbac73b1bacc03cbab4d

    • SHA512

      0c65b35f59dc3dce6d4951800696573619e2e8cbff6f623f2f1d39b740eb79495515436cd82bcf38d315688f456424bd03cd8bc32fe7389eb1b5d25921bc0a31

    • SSDEEP

      1536:4UUPcxVteCW7PMVgOyWIeH1bc/buLLhaQzcaLVclN:4UmcxV4x7PMVLyOH1bcMLgQLBY

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks