General
-
Target
3c914dc535afe68c25901e93a5c7653fd5006b15c94bfad2eecef52453adf976
-
Size
74KB
-
MD5
4902564a38698bd29dbb1936dc948f7f
-
SHA1
67ea718f7848ba1e0c7e4a21de2f98a03a1e1953
-
SHA256
3c914dc535afe68c25901e93a5c7653fd5006b15c94bfad2eecef52453adf976
-
SHA512
039a9ca2fbf2340635f956df991737e6ffa20225072256f047c31aa02c230df69dfbc1c8bc31fca708028b615b94e89deb2f306b4ac3a9239649d81e32297d11
-
SSDEEP
1536:ZUPkcx5v/5CxSPMVo7zOsMdIfH1b//R4LZQzc6LVclN:ZUMcx5vx2SPMVo7zOsMQH1b/GZQrBY
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Botnet
Default
C2
34.45.30.242:443
34.45.30.242:80
34.66.204.146:443
34.66.204.146:80
Mutex
uyvnhoyeedhzwfofge
Attributes
-
delay
1
-
install
true
-
install_file
svchost.exe
-
install_folder
%AppData%
aes.plain
Signatures
-
Async RAT payload 1 IoCs
-
Asyncrat family
-
VenomRAT 1 IoCs
Detects VenomRAT.
-
Venomrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3c914dc535afe68c25901e93a5c7653fd5006b15c94bfad2eecef52453adf976
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections