General

  • Target

    VENOMPACKED.exe

  • Size

    400KB

  • Sample

    240811-21eq8sxerg

  • MD5

    08ac61f7243a579754950f5f7d005e24

  • SHA1

    9e173cf276fd052b5c6df86c3c9a037d26f52a3a

  • SHA256

    43688c6934b8a9cb86b86a0e02841386dced38c3b2dc54341a702af9457f5805

  • SHA512

    cbaa7f4f61632b8ee582bc8fac7a79827e90f9cb32d8a91f943cbac32031b7541923463eec2108b693209a845ef059f36841599982f0f2e692972f2ca3a13251

  • SSDEEP

    12288:y+qGGys/4s7btyHND8Dz5UYgBKl+qGGys/4s7btyHND8Dz5UYgBK:lVHRqDGh/VHRqDGh

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

147.185.221.21:46268

Mutex

daizrkneoi

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      VENOMPACKED.exe

    • Size

      400KB

    • MD5

      08ac61f7243a579754950f5f7d005e24

    • SHA1

      9e173cf276fd052b5c6df86c3c9a037d26f52a3a

    • SHA256

      43688c6934b8a9cb86b86a0e02841386dced38c3b2dc54341a702af9457f5805

    • SHA512

      cbaa7f4f61632b8ee582bc8fac7a79827e90f9cb32d8a91f943cbac32031b7541923463eec2108b693209a845ef059f36841599982f0f2e692972f2ca3a13251

    • SSDEEP

      12288:y+qGGys/4s7btyHND8Dz5UYgBKl+qGGys/4s7btyHND8Dz5UYgBK:lVHRqDGh/VHRqDGh

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks