General

  • Target

    Neverlose.crack.exe

  • Size

    89KB

  • Sample

    240924-dwezfasgmn

  • MD5

    0909e7a1106c38e3655034b9b9f190f4

  • SHA1

    85eea7301466942b4e98a7ddabfad646edf8edb8

  • SHA256

    491ad811f856372c15fad6bce21300de6e821dc81a3dcdbc25cb780055635403

  • SHA512

    4107357d48058ab97352f778efb5f5869e7e34e6223548d9281de8f18c0e8be8b68c230bc60a5bcf97ed9e60893da0521748e2d052594dc4647fb238023046b6

  • SSDEEP

    1536:4UUPcxVteCW7PMVee9VdQuDI6H1bf//h9OMSQzcJnfC3GXGxRT+kNLVclN:4UmcxV4x7PMVee9VdQsH1bfLSQqCBxRo

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Neverlose

C2

192.168.0.38:4449

Mutex

nbtqcdlqwpatp

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Neverlose.crack.exe

    • Size

      89KB

    • MD5

      0909e7a1106c38e3655034b9b9f190f4

    • SHA1

      85eea7301466942b4e98a7ddabfad646edf8edb8

    • SHA256

      491ad811f856372c15fad6bce21300de6e821dc81a3dcdbc25cb780055635403

    • SHA512

      4107357d48058ab97352f778efb5f5869e7e34e6223548d9281de8f18c0e8be8b68c230bc60a5bcf97ed9e60893da0521748e2d052594dc4647fb238023046b6

    • SSDEEP

      1536:4UUPcxVteCW7PMVee9VdQuDI6H1bf//h9OMSQzcJnfC3GXGxRT+kNLVclN:4UmcxV4x7PMVee9VdQsH1bfLSQqCBxRo

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • VenomRAT

      Detects VenomRAT.

MITRE ATT&CK Matrix

Tasks