General

  • Target

    3c914dc535afe68c25901e93a5c7653fd5006b15c94bfad2eecef52453adf976

  • Size

    74KB

  • Sample

    240818-xbvzpsxhke

  • MD5

    4902564a38698bd29dbb1936dc948f7f

  • SHA1

    67ea718f7848ba1e0c7e4a21de2f98a03a1e1953

  • SHA256

    3c914dc535afe68c25901e93a5c7653fd5006b15c94bfad2eecef52453adf976

  • SHA512

    039a9ca2fbf2340635f956df991737e6ffa20225072256f047c31aa02c230df69dfbc1c8bc31fca708028b615b94e89deb2f306b4ac3a9239649d81e32297d11

  • SSDEEP

    1536:ZUPkcx5v/5CxSPMVo7zOsMdIfH1b//R4LZQzc6LVclN:ZUMcx5vx2SPMVo7zOsMQH1b/GZQrBY

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

34.45.30.242:443

34.45.30.242:80

34.66.204.146:443

34.66.204.146:80

Mutex

uyvnhoyeedhzwfofge

Attributes
  • delay

    1

  • install

    true

  • install_file

    svchost.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      3c914dc535afe68c25901e93a5c7653fd5006b15c94bfad2eecef52453adf976

    • Size

      74KB

    • MD5

      4902564a38698bd29dbb1936dc948f7f

    • SHA1

      67ea718f7848ba1e0c7e4a21de2f98a03a1e1953

    • SHA256

      3c914dc535afe68c25901e93a5c7653fd5006b15c94bfad2eecef52453adf976

    • SHA512

      039a9ca2fbf2340635f956df991737e6ffa20225072256f047c31aa02c230df69dfbc1c8bc31fca708028b615b94e89deb2f306b4ac3a9239649d81e32297d11

    • SSDEEP

      1536:ZUPkcx5v/5CxSPMVo7zOsMdIfH1b//R4LZQzc6LVclN:ZUMcx5vx2SPMVo7zOsMQH1b/GZQrBY

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • VenomRAT

      Detects VenomRAT.

MITRE ATT&CK Matrix

Tasks