General

  • Target

    6f47373b38d3552785c6739a6269f093c5bff95e7af9d4e1860078958dbe881a

  • Size

    79KB

  • Sample

    240818-xft8za1grn

  • MD5

    037d11156638e4584494ef53322413ba

  • SHA1

    a88f49727e65aa507c820aadcd95686bc49f5b8a

  • SHA256

    6f47373b38d3552785c6739a6269f093c5bff95e7af9d4e1860078958dbe881a

  • SHA512

    e002aa61a801a8071ac669e5cc5f73cc4a17c9c2f8b960929a8dfe9617344bee6d678f4b998ab5311bbca45960c0410832642fb94916188efa219562d5992124

  • SSDEEP

    1536:QUYkcxVKpC6yPMVS07RhcIgH1ba/am2dDgQzcD0SXVclN:QU1cxVENyPMVPNhWH1bawdDgQWFY

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

127.0.0.1:4449

127.0.0.1:800

127.0.0.1:600

127.0.0.1:17790

192.168.1.17:4449

192.168.1.17:800

192.168.1.17:600

192.168.1.17:17790

3.142.167.54:4449

3.142.167.54:800

3.142.167.54:600

3.142.167.54:17790

Mutex

uzaseljnonsxi

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      6f47373b38d3552785c6739a6269f093c5bff95e7af9d4e1860078958dbe881a

    • Size

      79KB

    • MD5

      037d11156638e4584494ef53322413ba

    • SHA1

      a88f49727e65aa507c820aadcd95686bc49f5b8a

    • SHA256

      6f47373b38d3552785c6739a6269f093c5bff95e7af9d4e1860078958dbe881a

    • SHA512

      e002aa61a801a8071ac669e5cc5f73cc4a17c9c2f8b960929a8dfe9617344bee6d678f4b998ab5311bbca45960c0410832642fb94916188efa219562d5992124

    • SSDEEP

      1536:QUYkcxVKpC6yPMVS07RhcIgH1ba/am2dDgQzcD0SXVclN:QU1cxVENyPMVPNhWH1bawdDgQWFY

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • VenomRAT

      Detects VenomRAT.

MITRE ATT&CK Matrix

Tasks