Overview

overview

10

Static

static

3

g2m.dll

windows7-x64

3

g2m.dll

windows10-1703-x64

3

g2m.dll

windows10-2004-x64

3

g2m.dll

windows11-21h2-x64

3

runvm.bat

windows7-x64

1

runvm.bat

windows10-1703-x64

10

runvm.bat

windows10-2004-x64

10

runvm.bat

windows11-21h2-x64

10

vm.exe

windows7-x64

1

vm.exe

windows10-1703-x64

10

vm.exe

windows10-2004-x64

10

vm.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    vm.zip
  • Size 290KB
  • Sample240727-qpgkxavblb
  • SHA256 63b0e303a05ad2eb2a93e2f9cd96e50361cf1e0d29f9cab8b0a98d1185347f8a
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
asyncratdefaultdiscoveryrat

Malware Config

Extracted

Family

  • asyncrat

Version

  • Venom RAT + HVNC + Stealer + Grabber v6.0.2

Botnet

  • Default

C2

  • 94.156.79.190:4449

  • 193.222.96.24:4449

Mutex

  • aqswvfsywrpgi

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target
      g2m.dll
    • Size 389KB
    • SHA256 e9f6dc3f1bd84642326784c7eb700125b548aa9522ad35eaf36903fbb1b5650e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    discovery
    behavioral1behavioral2behavioral3behavioral4
    • Target
      runvm.bat
    • Size 49B
    • SHA256 ac2103023d146e62c3b708384ae0ed044d17258901272068ef93c15c9f5aa06e
    • MD5 SHA1 SHA512
    Score
    10/10
    asyncratdefaultdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat
    behavioral5behavioral6behavioral7behavioral8
    • Target
      vm.exe
    • Size 39KB
    • SHA256 796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat
    behavioral10behavioral11behavioral12behavioral9

MITRE ATT&CK Enterprise v15

Tasks