General

  • Target

    RedTiger

  • Size

    74KB

  • MD5

    0e45b3da133b30f9c5f6971336587768

  • SHA1

    46609e9cf1848ee188ff5917f03c18bd33950d98

  • SHA256

    9230c9ecad0f7bfc33da597617e421edb6ded3449db045c030a1eb0d7656294f

  • SHA512

    9e0a60da503a94de7007e72fb80161760c941516ab12c4ac243dad280da5249d5aa87ad2848646b145c07102e1bc8195f11b2a2889c038ee40133d890a3f414b

  • SSDEEP

    1536:KU1gcxe1eHCZWPMVr4SfSzyIrH1bi/tlGCPoQzcGLVclN:KUKcxe1ayWPMVr4SSH1bijPoQfBY

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

127.0.0.1:4449

Mutex

kycibynwcrxulesbiyi

Attributes
  • delay

    1

  • install

    false

  • install_file

    test.exe

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RedTiger
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections