Overview

overview

10

Static

static

10

BootstrapperV1.19.exe

windows7-x64

10

BootstrapperV1.19.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    BootstrapperV1.19.exe

  • Size

    74KB

  • MD5

    5f0283e6d2a5cb173c459448ae147bc3

  • SHA1

    d21f092a6b14bcf03d9b511c9a0da04fc27d1b8a

  • SHA256

    b321b4e66a394a1db24ef90ac39a6b1cc206f49b1ddb70f4a0e987ec11b7b566

  • SHA512

    dbdd7ea709652e0a4192325587f14c01c59951e7f2c46983fbf5f903a91077290aba5000329cb4992fcd3114f0b83e851dd5a6f9ff2b261ac8fca8519a0b6efd

  • SSDEEP

    1536:/UXkcxVKpC6yPMVKe9VdQuDI6H1bf/SXkHiXQzcnaVclN:/U0cxVENyPMVKe9VdQsH1bfgkGQ6oY

Score
10/10
ratsolaraasyncratvenomrat

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

solara

C2

10.9.79.158:4449

10.9.79.158:46511

193.161.193.99:4449

193.161.193.99:46511

10.9.134.230:4449

10.9.134.230:46511
Mutex

fftigxrvcxahyqyhwa

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • VenomRAT 1 IoCs

    Detects VenomRAT.

    rat
  • Venomrat family
    venomrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • BootstrapperV1.19.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections