Overview

overview

10

Static

static

10

cb3f4fa497...4b.exe

windows7-x64

10

cb3f4fa497...4b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb3f4fa497e08f88b88fc62c4de2766a2d703e39faf2b8b8f4652e9b9bf6084b

  • Size

    74KB

  • Sample

    240818-xpzj2ssdll

  • MD5

    5bc9a6261a82b955f9c29843e5a67fbd

  • SHA1

    47b97f293f8985dc0eda3d5d6dafd3e7fec19664

  • SHA256

    cb3f4fa497e08f88b88fc62c4de2766a2d703e39faf2b8b8f4652e9b9bf6084b

  • SHA512

    f32a04e2079e90877804ad867f3d752274c069a5db43010c0ca12a09fa66d4a04aed357e89d4d7a24ee4873d061ec8f4b3ff9ea479f57ccca4a86871d7764a9b

  • SSDEEP

    1536:hUNwcxea0CTmPMVlKTc3XIXH1bk/XcuL8QzcOLVclN:hUicxeFImPMVlKKyH1bkEQHBY

Score
10/10
asyncratvenomratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

Mutex

ctqysdelswmmvyagx

Attributes
  • delay

    1

  • install

    true

  • install_file

    ai.exe

  • install_folder

    %AppData%

  • pastebin_config

    https://pastebin.ai/czlhvpemu9

aes.plain

Targets

    • Target

      cb3f4fa497e08f88b88fc62c4de2766a2d703e39faf2b8b8f4652e9b9bf6084b

    • Size

      74KB

    • MD5

      5bc9a6261a82b955f9c29843e5a67fbd

    • SHA1

      47b97f293f8985dc0eda3d5d6dafd3e7fec19664

    • SHA256

      cb3f4fa497e08f88b88fc62c4de2766a2d703e39faf2b8b8f4652e9b9bf6084b

    • SHA512

      f32a04e2079e90877804ad867f3d752274c069a5db43010c0ca12a09fa66d4a04aed357e89d4d7a24ee4873d061ec8f4b3ff9ea479f57ccca4a86871d7764a9b

    • SSDEEP

      1536:hUNwcxea0CTmPMVlKTc3XIXH1bk/XcuL8QzcOLVclN:hUicxeFImPMVlKKyH1bkEQHBY

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • VenomRAT

      Detects VenomRAT.

      rat

    • Async RAT payload

      rat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks