General

  • Target

    Discord.exe

  • Size

    74KB

  • Sample

    240630-t8egfatgpm

  • MD5

    81eecbef60edf6e46d4c91f5f90f18d8

  • SHA1

    bf1926da1a88e06e65b4076922aa9b644130e6e6

  • SHA256

    eb8bc5287a5b1e3fde917ee5e35d83bad6ac14cae6b4d7bb7e5b1a24989fd3d7

  • SHA512

    4e18054a89b9f76de16ee832443976d80e2dfb3e68b0ebe81a718402df57643a724d661ee7e86368de75a1efc731ff39fd85263579d106303e8efe2c8cef5b81

  • SSDEEP

    1536:EUKkcx9pXCTyPMV6leiUIt/1b8/EZKQzcrMVclN:EUDcx958yPMVIeiv/1b8GKQWOY

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

147.185.221.20:49485

Mutex

gwbhzwlfrv

Attributes
  • delay

    1

  • install

    true

  • install_file

    Discord.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Discord.exe

    • Size

      74KB

    • MD5

      81eecbef60edf6e46d4c91f5f90f18d8

    • SHA1

      bf1926da1a88e06e65b4076922aa9b644130e6e6

    • SHA256

      eb8bc5287a5b1e3fde917ee5e35d83bad6ac14cae6b4d7bb7e5b1a24989fd3d7

    • SHA512

      4e18054a89b9f76de16ee832443976d80e2dfb3e68b0ebe81a718402df57643a724d661ee7e86368de75a1efc731ff39fd85263579d106303e8efe2c8cef5b81

    • SSDEEP

      1536:EUKkcx9pXCTyPMV6leiUIt/1b8/EZKQzcrMVclN:EUDcx958yPMVIeiv/1b8GKQWOY

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

MITRE ATT&CK Matrix

Tasks