General

  • Target

    32de79c03abe883339102b8db7988eecfd394c8f00ae35a6d5d3194fa18a7001

  • Size

    83KB

  • Sample

    240818-xaz72a1ekl

  • MD5

    97506c0704d83b5f2a3c644fce2a0d91

  • SHA1

    eb7d1f25e651414cc2ec2db9eb211ce416520294

  • SHA256

    32de79c03abe883339102b8db7988eecfd394c8f00ae35a6d5d3194fa18a7001

  • SHA512

    edd63cad21ebf8f93117f792103eb63fe4033d152763feef1e7ff344be5db180036b7b007158c5eb371c6c34e9b0e9df2fc099db71eb5bbc53b89d1d529d52d1

  • SSDEEP

    1536:PUEkcx4VHsC0SPMVKUiLsiIynH1bo/wIQzcuLVclN:PUxcx4GfSPMVFiFnH1boFQXBY

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

95.142.46.3:4449

95.142.46.3:7000

Mutex

zlgcqgmshzbvhurfz

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      32de79c03abe883339102b8db7988eecfd394c8f00ae35a6d5d3194fa18a7001

    • Size

      83KB

    • MD5

      97506c0704d83b5f2a3c644fce2a0d91

    • SHA1

      eb7d1f25e651414cc2ec2db9eb211ce416520294

    • SHA256

      32de79c03abe883339102b8db7988eecfd394c8f00ae35a6d5d3194fa18a7001

    • SHA512

      edd63cad21ebf8f93117f792103eb63fe4033d152763feef1e7ff344be5db180036b7b007158c5eb371c6c34e9b0e9df2fc099db71eb5bbc53b89d1d529d52d1

    • SSDEEP

      1536:PUEkcx4VHsC0SPMVKUiLsiIynH1bo/wIQzcuLVclN:PUxcx4GfSPMVFiFnH1boFQXBY

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • VenomRAT

      Detects VenomRAT.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

MITRE ATT&CK Matrix

Tasks