General

  • Target

    97e03008b43e66a2bea0f7deef9bfb99e2211272778b9054e3e041b229cf4735.exe

  • Size

    74KB

  • Sample

    240912-h9h1gaxhmn

  • MD5

    672c32be863161574f79e6b396ef5358

  • SHA1

    60b1ef38d74ed8fd5ee6d2c1a39e529e653a188b

  • SHA256

    97e03008b43e66a2bea0f7deef9bfb99e2211272778b9054e3e041b229cf4735

  • SHA512

    bbf1569ca281731d246835df7652cfcac700c8e61eb5505dcca9fc1b821aa73000f0224f806cc3ea8947d5ed5391ba892cea2d2bdbd9d4c750ff982b24d97068

  • SSDEEP

    1536:vUEkcx4VHsC0SPMVzjsVLcCWf13Isx1bq/CPRQzcuLVclN:vUxcx4GfSPMVPseCWf1Fx1bqwQnBY

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

QuickBooks

C2

5.226.137.132:4449

Mutex

jwgwlytcftwxrrxrhvr

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      97e03008b43e66a2bea0f7deef9bfb99e2211272778b9054e3e041b229cf4735.exe

    • Size

      74KB

    • MD5

      672c32be863161574f79e6b396ef5358

    • SHA1

      60b1ef38d74ed8fd5ee6d2c1a39e529e653a188b

    • SHA256

      97e03008b43e66a2bea0f7deef9bfb99e2211272778b9054e3e041b229cf4735

    • SHA512

      bbf1569ca281731d246835df7652cfcac700c8e61eb5505dcca9fc1b821aa73000f0224f806cc3ea8947d5ed5391ba892cea2d2bdbd9d4c750ff982b24d97068

    • SSDEEP

      1536:vUEkcx4VHsC0SPMVzjsVLcCWf13Isx1bq/CPRQzcuLVclN:vUxcx4GfSPMVPseCWf1Fx1bqwQnBY

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • VenomRAT

      Detects VenomRAT.

MITRE ATT&CK Matrix

Tasks