Overview

overview

10

Static

static

10

Venom Rat.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Venom Rat.exe

  • Size

    55KB

  • Sample

    240811-tjm3aawgkq

  • MD5

    a244798c97a8a3e37011f53efccd6caa

  • SHA1

    c50d9fe5f809b7ffde015988ec9e603618134b35

  • SHA256

    ec4289e56bef63ac6d452510494bbe49c791690a9d4fa5109ad013729eb42dd9

  • SHA512

    7b17e6e6662e483ca57a3f12b4113795be1e438744de25f09df33ca1bdd60b7e55569db29e2aedc78205d2e16913c66695a09b4f13de73b1567db78b1f3199d2

  • SSDEEP

    1536:ieOPIQIAi28xPShfW1T0NserwffzzkVRnLVclN:/OPIQIIfU1CsNfMbBY

Score
10/10
asyncratdefaultdiscoveryrat

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

147.185.221.21:46268

Mutex

kpujumnfazovbioaqya

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Venom Rat.exe

    • Size

      55KB

    • MD5

      a244798c97a8a3e37011f53efccd6caa

    • SHA1

      c50d9fe5f809b7ffde015988ec9e603618134b35

    • SHA256

      ec4289e56bef63ac6d452510494bbe49c791690a9d4fa5109ad013729eb42dd9

    • SHA512

      7b17e6e6662e483ca57a3f12b4113795be1e438744de25f09df33ca1bdd60b7e55569db29e2aedc78205d2e16913c66695a09b4f13de73b1567db78b1f3199d2

    • SSDEEP

      1536:ieOPIQIAi28xPShfW1T0NserwffzzkVRnLVclN:/OPIQIIfU1CsNfMbBY

    Score
    10/10
    asyncratdefaultdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks