General

  • Target

    PanelexecutorV10.exe

  • Size

    68KB

  • Sample

    240708-lwxs9awckg

  • MD5

    6ad64efc580e74ea69e039ed10607404

  • SHA1

    03b67e5a02f5b3412132a5ac06e38115d95a4bb3

  • SHA256

    363dbbb7542684ce9b5732337dc6356235c30bee1036822e36e52029acb5816c

  • SHA512

    763ab3cbfe7e1d6a76a0dfcc0abf04fb403bd5db783395f6f6a99b07b8fe0da402f4f41faf82e7cc85bc7aee9b5964340387e8e94a2f9a4a621e3a687f46b1f0

  • SSDEEP

    1536:FmptUOlV9tp0OKClGbbWwZGVI1YGqcDpqKmY7:sMOlj7xlGbbW1Lcgz

Malware Config

Extracted

Family

asyncrat

Version

5.0.5

Botnet

Venom Clients

C2

127.0.0.1:4449

127.0.0.1:80

192.168.100.36:4449

192.168.100.36:80

Mutex

Venom_RAT_HVNC_Mutex_Venom RAT_HVNC

Attributes
  • delay

    2

  • install

    true

  • install_file

    PanelExecutorV9.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      PanelexecutorV10.exe

    • Size

      68KB

    • MD5

      6ad64efc580e74ea69e039ed10607404

    • SHA1

      03b67e5a02f5b3412132a5ac06e38115d95a4bb3

    • SHA256

      363dbbb7542684ce9b5732337dc6356235c30bee1036822e36e52029acb5816c

    • SHA512

      763ab3cbfe7e1d6a76a0dfcc0abf04fb403bd5db783395f6f6a99b07b8fe0da402f4f41faf82e7cc85bc7aee9b5964340387e8e94a2f9a4a621e3a687f46b1f0

    • SSDEEP

      1536:FmptUOlV9tp0OKClGbbWwZGVI1YGqcDpqKmY7:sMOlj7xlGbbW1Lcgz

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

MITRE ATT&CK Enterprise v15

Tasks