Overview

overview

10

Static

static

10

6d1dab1d4a...0N.exe

windows7-x64

10

6d1dab1d4a...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6d1dab1d4a945580617f762b3c23a6b0N.exe

  • Size

    63KB

  • MD5

    6d1dab1d4a945580617f762b3c23a6b0

  • SHA1

    28d17e16d274687851892790a0e3b8dbdd3c1372

  • SHA256

    689733b311d3c8412e007386a5d88e50a566ed2d5b2df97d0fc4aa7cfd562384

  • SHA512

    fe84ba4ab3352118dcfb9b863b246b8d60ac8218f7c96e584f3877858fd6fd173211883dcff66f8347df00cf6e99e9afa41ebf5c1ff87abe4c6a33a7ce49aaf1

  • SSDEEP

    1536:AhthBLTRQUhZ4DcVdReeiIVrGbbXwyTQeZvGGDpqKmY7:AhthBLTRQUhZ4idUeXGbbXjTQIHgz

Score
10/10
ratvenom clientsasyncrat

Malware Config

Extracted

Family

asyncrat

Version

5.0.5

Botnet

Venom Clients

C2

91.92.242.59:4449

Mutex

jemhrguergmuju388mug

Attributes
  • delay

    1

  • install

    true

  • install_file

    Lol.exe

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6d1dab1d4a945580617f762b3c23a6b0N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections