General

  • Target

    850932bf796d17da05dc8c531993db6423b56686ff7dc68cc0a802e87f827fad

  • Size

    6.3MB

  • MD5

    769a1873247d5024808cf7bd70555b01

  • SHA1

    2e55be1191affa933438890fc34eb31136bef045

  • SHA256

    850932bf796d17da05dc8c531993db6423b56686ff7dc68cc0a802e87f827fad

  • SHA512

    2a1b089200374f89728e8203d34c5aa23b1d6519dc6bb662d10dbbd8e65e4247f73abc1b77af8643ff69d07590caf2d5b9148b260e39b84b71b979486b49733b

  • SSDEEP

    12288:7KkAmLeYTYzVtPJpBDaY2V52VpKkAmLeYTYzO:OZBtPJHDaXZK

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

94.156.65.172:4449

Mutex

izslwuidilziewad

Attributes
  • delay

    1

  • install

    true

  • install_file

    AntiMalware.exe

  • install_folder

    %AppData%

aes.plain

Signatures

  • Asyncrat family
  • VenomRAT 1 IoCs

    Detects VenomRAT.

  • Venomrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 850932bf796d17da05dc8c531993db6423b56686ff7dc68cc0a802e87f827fad
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections