Overview

overview

10

Static

static

10

Rat2222.exe

windows7-x64

10

Rat2222.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Rat2222.exe

  • Size

    73KB

  • Sample

    240720-nxaq8asdqe

  • MD5

    4a540ddfe8301f190f1562071851cbef

  • SHA1

    733f4781ca2aba8255619bfc758fa67e88d410ea

  • SHA256

    db3ea1dab8411c6d7409f85e51b7e6a009a91951b8a5a30e6a67abbeb375b811

  • SHA512

    64254eb649774d04db2e31d481ff24310bbf8ab837944fe881d5e10516c0c4162da59cfa4969f7902a28b670c2848b6290a5dbfc8092eb2772ba3c06690c5c55

  • SSDEEP

    1536:RUKkcx9pXCTyPMV/Fqiev5WI7H1bJ/tMnQzcF6VclNi:RUDcx958yPMV9qzpH1bJGQoIYY

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

127.0.0.1:4449

Mutex

asdasdas

Attributes
  • delay

    1

  • install

    true

  • install_file

    sasdasd.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Rat2222.exe

    • Size

      73KB

    • MD5

      4a540ddfe8301f190f1562071851cbef

    • SHA1

      733f4781ca2aba8255619bfc758fa67e88d410ea

    • SHA256

      db3ea1dab8411c6d7409f85e51b7e6a009a91951b8a5a30e6a67abbeb375b811

    • SHA512

      64254eb649774d04db2e31d481ff24310bbf8ab837944fe881d5e10516c0c4162da59cfa4969f7902a28b670c2848b6290a5dbfc8092eb2772ba3c06690c5c55

    • SSDEEP

      1536:RUKkcx9pXCTyPMV/Fqiev5WI7H1bJ/tMnQzcF6VclNi:RUDcx958yPMV9qzpH1bJGQoIYY

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks