General

  • Target

    f8f9913e070a0ef683f16c0932cbe1664933d0079f4b1b23d5c2abf3b8c18208N

  • Size

    74KB

  • Sample

    240917-m4xc5azalg

  • MD5

    b246254467f4aa8716a98066ae2a1380

  • SHA1

    a69b48c1fdd2af15fe6eb5534d4c9dd4258a9162

  • SHA256

    f8f9913e070a0ef683f16c0932cbe1664933d0079f4b1b23d5c2abf3b8c18208

  • SHA512

    6f06c33d95bca7174651549952ba9faf7be1ea196cbfdf8eb566566056ff673f72fc4b07b5ef34e37791fa102a85fad3b92c3c9c40cc40919ffe102e7783f863

  • SSDEEP

    1536:8UUPcxVteCW7PMVee9VdQuDI6H1bf/ARWmQzcBLVclN:8UmcxV4x7PMVee9VdQsH1bfoRWmQYBY

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

45.131.109.206:4449

Mutex

uojkfdfvuzyucny

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      f8f9913e070a0ef683f16c0932cbe1664933d0079f4b1b23d5c2abf3b8c18208N

    • Size

      74KB

    • MD5

      b246254467f4aa8716a98066ae2a1380

    • SHA1

      a69b48c1fdd2af15fe6eb5534d4c9dd4258a9162

    • SHA256

      f8f9913e070a0ef683f16c0932cbe1664933d0079f4b1b23d5c2abf3b8c18208

    • SHA512

      6f06c33d95bca7174651549952ba9faf7be1ea196cbfdf8eb566566056ff673f72fc4b07b5ef34e37791fa102a85fad3b92c3c9c40cc40919ffe102e7783f863

    • SSDEEP

      1536:8UUPcxVteCW7PMVee9VdQuDI6H1bf/ARWmQzcBLVclN:8UmcxV4x7PMVee9VdQsH1bfoRWmQYBY

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • StormKitty

      StormKitty is an open source info stealer written in C#.

    • StormKitty payload

    • VenomRAT

      Detects VenomRAT.

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks