Resubmissions

03/08/2024, 00:40

240803-a1fvraxark10

03/08/2024, 00:38

240803-azgqnaxanm10

General

  • Target
    injectorStarter.exe
  • Size 1.0MB
  • Sample240803-a1fvraxark
  • SHA256 cf0514fa706a4cbb3ddc7e23665fe1eafa24dd1f97fa609c80c5d0dee246d71c
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • asyncrat

Version
  • Venom RAT + HVNC + Stealer + Grabber v6.0.2

Botnet
  • Default

C2
  • 41.216.183.109:4449

Mutex
  • ioj3548u9438u943ojnezjt

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target
      injectorStarter.exe
    • Size 1.0MB
    • SHA256 cf0514fa706a4cbb3ddc7e23665fe1eafa24dd1f97fa609c80c5d0dee246d71c
    • MD5 SHA1 SHA512 SSDEEP
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Executes dropped EXE

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks