General
-
Target
8ee6f68dca0099b47df91506985c862800981bc91cc01d35768abe0350a2f3dc
-
Size
73KB
-
MD5
0bbabbd07feac55a3cea61b0f420c76e
-
SHA1
d6c4efa8da5419be01909320165a968435198855
-
SHA256
8ee6f68dca0099b47df91506985c862800981bc91cc01d35768abe0350a2f3dc
-
SHA512
4a047e9e613adf2067bab73d9896e0119dc219103fde9d76bd47f7e63d2c5c416aae5809bd5c741081349b10a946b82c36a56578ed19af96682d08eda25acd37
-
SSDEEP
1536:dUhQcx/5z/CMfPMV6e9VdQkhDIyH1bf/90AxQzcX3VclN:dUOcx/5bHfPMV6e9VdQgH1bfaAxQilY
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Botnet
Default
C2
147.185.221.20:47800
Mutex
jrezrdiemuo
Attributes
-
delay
1
-
install
true
-
install_file
kV.exe
-
install_folder
%AppData%
aes.plain
Signatures
-
Asyncrat family
-
VenomRAT 1 IoCs
Detects VenomRAT.
-
Venomrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8ee6f68dca0099b47df91506985c862800981bc91cc01d35768abe0350a2f3dc
Headers
Sections