General

  • Target

    c43396cd1bd4199d544b2abbcc33d5f06af2807258bce6010912efefc6adb0ba

  • Size

    73KB

  • MD5

    7317d31ebc5ee785cf499951c5a6593b

  • SHA1

    b49ac40311cb40fe70d5457c73fb998b6830b809

  • SHA256

    c43396cd1bd4199d544b2abbcc33d5f06af2807258bce6010912efefc6adb0ba

  • SHA512

    c6288511576dfc631ac32f27b750c713d5f71bb4cbcbc2939f5718476b04ba1a82fe318898dac80f9c7f8a8bae74cdc6e6b00246148e122471af968fae8a1328

  • SSDEEP

    1536:TU1gcxe1eHCZWPMVKe9VdQkhDIyH1bf/paLQzc33VclN:TUKcxe1ayWPMVKe9VdQgH1bfoQSlY

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

86.208.62.200:4449

Mutex

ixdcghsoqhisxhak

Attributes
  • delay

    1

  • install

    true

  • install_file

    test.exe

  • install_folder

    %AppData%

aes.plain

Signatures

  • Asyncrat family
  • VenomRAT 1 IoCs

    Detects VenomRAT.

  • Venomrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c43396cd1bd4199d544b2abbcc33d5f06af2807258bce6010912efefc6adb0ba
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections