General
-
Target
629ef96921c67d7102df6138b3085ff4dca0ae1796cc755752bd0ce876b36ac0
-
Size
5.9MB
-
MD5
7e53c0fe2ceecaef94bd317c526d3f09
-
SHA1
70fee9a15a7507e6cb723424258755426afe3247
-
SHA256
629ef96921c67d7102df6138b3085ff4dca0ae1796cc755752bd0ce876b36ac0
-
SHA512
fab95cf71276fd9f08db1ed5542bff2bb073655a1d785ddefa36cd87a32ac2ac71974a7c26bd24dda0897c52caeccc93dcd29e4883de223afa79b7b59d34bfaf
-
SSDEEP
12288:EKkAmLeYTYzVdduG802/z2KFWKkAmLeYTYzuvx:JZBdduG8fLZip
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Botnet
Default
C2
94.156.65.172:4449
Mutex
izslwuidilziewad
Attributes
-
delay
1
-
install
true
-
install_file
AntiMalware.exe
-
install_folder
%AppData%
aes.plain
Signatures
-
Asyncrat family
-
VenomRAT 1 IoCs
Detects VenomRAT.
-
Venomrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
629ef96921c67d7102df6138b3085ff4dca0ae1796cc755752bd0ce876b36ac0
Headers
Sections