General

  • Target

    719926d5661d42e41d116bf9d2b864f361c99214da2cd1f67becc2f925953290

  • Size

    111KB

  • Sample

    240818-xf997aybnh

  • MD5

    081d1441bb23508962fe1b5e35a08aea

  • SHA1

    b9e15824cf5523eabcdd9eb6328ebf1793dc81c1

  • SHA256

    719926d5661d42e41d116bf9d2b864f361c99214da2cd1f67becc2f925953290

  • SHA512

    6f6b5aa71ec0b04941fb540d9fd070fdd651c67e9c545cf623f52e1486bdad26ff5b2af3c59df9eaa5cc930b0c5e05f1b3c8c268b6a17d088d2b150d7c355bd4

  • SSDEEP

    3072:ZUTcxMmw6PMV2e9VdQsH1bf5oQEA2QtDud7r6GiX8QiQ//fY:Zjw6PMV2aesVbxoZA2eDudr6SEf

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

127.0.0.1:4449

127.0.0.1:8080

193.233.255.79:4449

193.233.255.79:8080

Mutex

53263126231

Attributes
  • delay

    1

  • install

    true

  • install_file

    42165.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      719926d5661d42e41d116bf9d2b864f361c99214da2cd1f67becc2f925953290

    • Size

      111KB

    • MD5

      081d1441bb23508962fe1b5e35a08aea

    • SHA1

      b9e15824cf5523eabcdd9eb6328ebf1793dc81c1

    • SHA256

      719926d5661d42e41d116bf9d2b864f361c99214da2cd1f67becc2f925953290

    • SHA512

      6f6b5aa71ec0b04941fb540d9fd070fdd651c67e9c545cf623f52e1486bdad26ff5b2af3c59df9eaa5cc930b0c5e05f1b3c8c268b6a17d088d2b150d7c355bd4

    • SSDEEP

      3072:ZUTcxMmw6PMV2e9VdQsH1bf5oQEA2QtDud7r6GiX8QiQ//fY:Zjw6PMV2aesVbxoZA2eDudr6SEf

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • VenomRAT

      Detects VenomRAT.

MITRE ATT&CK Matrix

Tasks