General

  • Target

    Free Robux Generator.exe

  • Size

    78KB

  • Sample

    241020-lewjvssgrk

  • MD5

    999bb8b6d93b644475385aabeac44eea

  • SHA1

    2d5c9ef549ba1edec8f546824d8d309090f68df2

  • SHA256

    4601775cd644a821b4c34209b2be38795c90341d9ae41a42d8e60aade75fa394

  • SHA512

    ab30eb89d317fd039afd284682d24477eb82ea8dc91194cb8d933385632ddeda20577f30f7e1bf32ebf7398da9d4ff1f5444a35c059e318d1ac657c3f6aadd5b

  • SSDEEP

    1536:FUEkcx4VHsC0SPMVGqTBeOLI6H1ba/gjtQzceNHGLVclN:FUxcx4GfSPMVfT7PH1basQ5MBY

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

127.0.0.1:4449

127.0.0.1:145

Mutex

yeltejgrltfmvune

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Free Robux Generator.exe

    • Size

      78KB

    • MD5

      999bb8b6d93b644475385aabeac44eea

    • SHA1

      2d5c9ef549ba1edec8f546824d8d309090f68df2

    • SHA256

      4601775cd644a821b4c34209b2be38795c90341d9ae41a42d8e60aade75fa394

    • SHA512

      ab30eb89d317fd039afd284682d24477eb82ea8dc91194cb8d933385632ddeda20577f30f7e1bf32ebf7398da9d4ff1f5444a35c059e318d1ac657c3f6aadd5b

    • SSDEEP

      1536:FUEkcx4VHsC0SPMVGqTBeOLI6H1ba/gjtQzceNHGLVclN:FUxcx4GfSPMVfT7PH1basQ5MBY

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

    • Downloads MZ/PE file

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks