Overview

overview

10

Static

static

3

corn.zip

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    corn.zip

  • Size

    42.8MB

  • Sample

    241010-nct95avbjh

  • MD5

    b2240d2e0b513829302d88ffe03d0dfc

  • SHA1

    53aee13e981747502a54c412794cc7cdc9d1805b

  • SHA256

    7f792e120c8f15453d4c3475911aa8ec4bcbe95514d9167aadfc445af7fe68a5

  • SHA512

    d687e375b6b70c18f4bb3b4a3c72277eed2f4433be63d7a3f1a192af29a4a89e7b333ec9743e83ed327bb7e7c0f251eb2e5735c5d73b740170afcc0663254c09

  • SSDEEP

    786432:CDXXuerfHkIZf06hLwbl9Pm2TW38ZF+oxwk4fbSep82zpMNV:CDnXfHkIZcXM2TdZooxwnXWNV

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

91.92.247.210:4449

Mutex

sarcofamdkdtq

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      corn.zip

    • Size

      42.8MB

    • MD5

      b2240d2e0b513829302d88ffe03d0dfc

    • SHA1

      53aee13e981747502a54c412794cc7cdc9d1805b

    • SHA256

      7f792e120c8f15453d4c3475911aa8ec4bcbe95514d9167aadfc445af7fe68a5

    • SHA512

      d687e375b6b70c18f4bb3b4a3c72277eed2f4433be63d7a3f1a192af29a4a89e7b333ec9743e83ed327bb7e7c0f251eb2e5735c5d73b740170afcc0663254c09

    • SSDEEP

      786432:CDXXuerfHkIZf06hLwbl9Pm2TW38ZF+oxwk4fbSep82zpMNV:CDnXfHkIZcXM2TdZooxwnXWNV

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Async RAT payload

      rat
    behavioral1

MITRE ATT&CK Matrix

Tasks