Overview

overview

10

Static

static

3

PDF.exe

windows7-x64

10

PDF.exe

windows10-1703-x64

10

PDF.exe

windows10-2004-x64

10

PDF.exe

windows11-21h2-x64

10

Resubmissions

21/01/2025, 13:31

250121-qspexswjes10

21/01/2025, 12:04

250121-n8tngasrhm10

13/07/2024, 12:59

240713-p8a2ss1gpq10

Sharing

Copy URL Twitter E-mail

General

  • Target
    PDF.exe
  • Size 258KB
  • Sample240713-p8a2ss1gpq
  • SHA256 ff9b39d07fd6e4a7f98d109664d91de9e318671da6412da85396541722d92799
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
asyncratdefaultdiscoveryexecutionlinkpdfrat

Malware Config

Extracted

Language

  • ps1

Deobfuscated
Source
URLs
  • exe.dropper

    http://thelustfactory.com/vns/1.ps1

Extracted

Language

  • ps1

Deobfuscated
Source
URLs
  • exe.dropper

    http://thelustfactory.com/vns/2.ps1

Extracted

Language

  • ps1

Deobfuscated
Source
URLs
  • exe.dropper

    http://thelustfactory.com/vns/winrar.exe

Extracted

Family

  • asyncrat

Version

  • Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

  • Default

C2

  • 54.153.17.157:14445

Mutex

  • rpujporiumcisxsdyop

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target
      PDF.exe
    • Size 258KB
    • SHA256 ff9b39d07fd6e4a7f98d109664d91de9e318671da6412da85396541722d92799
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    executionlinkpdfasyncratdefaultdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks