General
-
Target
f03e941d050826b288bf5bfb36def419d4e89bba8976ead214db405585af5308
-
Size
73KB
-
MD5
f74e8a071b955f39231c4c209e30f1a3
-
SHA1
594998b0b11979ce447911a3c35e3e93ae7ca26d
-
SHA256
f03e941d050826b288bf5bfb36def419d4e89bba8976ead214db405585af5308
-
SHA512
2bba73f8e75b2c1d37d885a727fca8c6afc70bbb7ad8ba33657fc351760bdc9fabbe0e9e72d7571a7696bed6557371aa3c8f4bdb606f3c0078c047ce866b838a
-
SSDEEP
1536:LUkPcxVteCW7PMVee9VdQkhDIyH1bf/06sDNQzc33VclN:LU2cxV4x7PMVee9VdQgH1bfRsRQylY
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
VFPower-[RAT-HVNC]
Botnet
Default
C2
110.42.248.7:4449
Mutex
mzmycyinygwybeaeb
Attributes
-
delay
1
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
Asyncrat family
-
VenomRAT 1 IoCs
Detects VenomRAT.
-
Venomrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
f03e941d050826b288bf5bfb36def419d4e89bba8976ead214db405585af5308
Headers
Sections