General
Static task
static1
URLScan task
urlscan1
Malware Config
Extracted
Family
asyncrat
Version
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Botnet
Default
C2
147.185.221.22:63702
147.185.221.22:9090
Mutex
dzjcaeitkmsymfueylc
Attributes
-
delay
1
-
install
true
-
install_file
Client.exe
-
install_folder
%AppData%
aes.plain
Targets
-
-
Target
https://www.mediafire.com/file/t0x64dde1he607n/touch%252Ce.zip/file
-
Async RAT payload
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-