General

  • Target

    b32a7ad778d42c70622f53aa18cd834e9664d0f3db4467809538fc6b232e8903

  • Size

    74KB

  • Sample

    240818-xmcbqsyemf

  • MD5

    2e2d8359cc5bb9e7b89adca1836050aa

  • SHA1

    9a4a9835ce32fb89b49e0316dfdd6672c1c7f465

  • SHA256

    b32a7ad778d42c70622f53aa18cd834e9664d0f3db4467809538fc6b232e8903

  • SHA512

    fab90c1e457fbed60351f0244bc97ffb086902f2ed0414f6a6a0723facce3ca229442e4e2a2d512172f1b9377e33afe4d21725cad2a75368f85e73e1ecc247a3

  • SSDEEP

    1536:8UUPcxVteCW7PMVee9VdQuDI6H1bf/oKQzcBLVclN:8UmcxV4x7PMVee9VdQsH1bfdQYBY

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

127.0.0.1:4449

Mutex

bdnhlymqjjllln

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      b32a7ad778d42c70622f53aa18cd834e9664d0f3db4467809538fc6b232e8903

    • Size

      74KB

    • MD5

      2e2d8359cc5bb9e7b89adca1836050aa

    • SHA1

      9a4a9835ce32fb89b49e0316dfdd6672c1c7f465

    • SHA256

      b32a7ad778d42c70622f53aa18cd834e9664d0f3db4467809538fc6b232e8903

    • SHA512

      fab90c1e457fbed60351f0244bc97ffb086902f2ed0414f6a6a0723facce3ca229442e4e2a2d512172f1b9377e33afe4d21725cad2a75368f85e73e1ecc247a3

    • SSDEEP

      1536:8UUPcxVteCW7PMVee9VdQuDI6H1bf/oKQzcBLVclN:8UmcxV4x7PMVee9VdQsH1bfdQYBY

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • VenomRAT

      Detects VenomRAT.

MITRE ATT&CK Matrix

Tasks