Overview

overview

10

Static

static

10

cb3f4fa497...4b.exe

windows7-x64

10

cb3f4fa497...4b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb3f4fa497e08f88b88fc62c4de2766a2d703e39faf2b8b8f4652e9b9bf6084b

  • Size

    74KB

  • MD5

    5bc9a6261a82b955f9c29843e5a67fbd

  • SHA1

    47b97f293f8985dc0eda3d5d6dafd3e7fec19664

  • SHA256

    cb3f4fa497e08f88b88fc62c4de2766a2d703e39faf2b8b8f4652e9b9bf6084b

  • SHA512

    f32a04e2079e90877804ad867f3d752274c069a5db43010c0ca12a09fa66d4a04aed357e89d4d7a24ee4873d061ec8f4b3ff9ea479f57ccca4a86871d7764a9b

  • SSDEEP

    1536:hUNwcxea0CTmPMVlKTc3XIXH1bk/XcuL8QzcOLVclN:hUicxeFImPMVlKKyH1bkEQHBY

Score
10/10
ratdefaultasyncratvenomrat

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

Mutex

ctqysdelswmmvyagx

Attributes
  • delay

    1

  • install

    true

  • install_file

    ai.exe

  • install_folder

    %AppData%

  • pastebin_config

    https://pastebin.ai/czlhvpemu9

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • VenomRAT 1 IoCs

    Detects VenomRAT.

    rat
  • Venomrat family
    venomrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cb3f4fa497e08f88b88fc62c4de2766a2d703e39faf2b8b8f4652e9b9bf6084b
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections