General

  • Target

    f3334684daa3ffc361dd25670db258b55c12c318bcc10f2e8e5497b36e9af678

  • Size

    73KB

  • MD5

    01e2978080396079938939b319d5fd72

  • SHA1

    6984876d90a6373d7ece0f6b2c0b634dd7d38e7b

  • SHA256

    f3334684daa3ffc361dd25670db258b55c12c318bcc10f2e8e5497b36e9af678

  • SHA512

    6d029839742f071561e6b70e0662e1b16465d588b4e6bb70d8349586ec14c7cfa699682c90c3a6cade4e8bbee240621747cee0fa583d151367f0938589f1c158

  • SSDEEP

    1536:TUEkcx4VHsC0SPMVJ7zOsM2CIXH1b//vtHZjQzcX3VclN:TUxcx4GfSPMVJ7zOsMsH1b/ndZjQilY

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

86.208.62.200:4449

Mutex

erkponymudhwpsao

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Asyncrat family
  • VenomRAT 1 IoCs

    Detects VenomRAT.

  • Venomrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f3334684daa3ffc361dd25670db258b55c12c318bcc10f2e8e5497b36e9af678
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections