Resubmissions

08-07-2024 04:59

240708-fmp46avhld 9

08-07-2024 04:49

240708-ffygysvfna 10

08-07-2024 04:34

240708-e64k8avcle 6

General

  • Target

    sample

  • Size

    80KB

  • Sample

    240708-ffygysvfna

  • MD5

    2a1b218812d4f6422434d97169e514a3

  • SHA1

    a6e870ba7b5c9f330c15f3d8a212bba3fa324dc2

  • SHA256

    8d83a0e36057dd1d65a54dea417afccf11009f0ace2738f387f8de611fb262bf

  • SHA512

    6ad15e153dd887a76b8b5badf7869c13887f71a486983684f0e91299cbd6a9a34f6c5b0458f7c9ecfa4d02d76f9c758b856cb0c0894d0fe8e93ef3e330fbc705

  • SSDEEP

    1536:I60JFL5SwNiecv6Q5hNFZuSuWtWWxcIBje/6apKjpcXW+NaE3qGksAG6ZJsnfJeH:H0JFL8wk6VIBje/6apKjpcXW+NaE3qGk

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

127.0.0.1:4449

127.0.0.1:1337

127.0.0.1:60723

147.185.221.18:4449

147.185.221.18:1337

147.185.221.18:60723

Mutex

gqjnxiopseukzyk

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      sample

    • Size

      80KB

    • MD5

      2a1b218812d4f6422434d97169e514a3

    • SHA1

      a6e870ba7b5c9f330c15f3d8a212bba3fa324dc2

    • SHA256

      8d83a0e36057dd1d65a54dea417afccf11009f0ace2738f387f8de611fb262bf

    • SHA512

      6ad15e153dd887a76b8b5badf7869c13887f71a486983684f0e91299cbd6a9a34f6c5b0458f7c9ecfa4d02d76f9c758b856cb0c0894d0fe8e93ef3e330fbc705

    • SSDEEP

      1536:I60JFL5SwNiecv6Q5hNFZuSuWtWWxcIBje/6apKjpcXW+NaE3qGksAG6ZJsnfJeH:H0JFL8wk6VIBje/6apKjpcXW+NaE3qGk

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

MITRE ATT&CK Enterprise v15

Tasks