General

  • Target

    Network Experience.exe

  • Size

    74KB

  • MD5

    a1e76f2fbe7af658b38383fbfd7cfff4

  • SHA1

    6dc43ef73b59ff29089a4b29bc8ade4ea63484ec

  • SHA256

    7782da3a91f91377c4c8d1d338237c6ff996ad42caaab27c1cdc5ea7e90058e1

  • SHA512

    4a47391ba3132cfb36da8d7f08ae6856312b26547845e3fe5f3ddd0939893245bf4de337671bc917926d5c764a6100d084845236ef1707560ff5be4aa5f2bed8

  • SSDEEP

    1536:rUa8cxqnHXC56PMVwKCpaIPr1bg/VkxLN+QzcoVVclN:rUrcxq3O6PMVQpLr1bg9kxQQJ3Y

Malware Config

Extracted

Family

asyncrat

Version

Venom Pwn3rzs' Edtition v6.0.1

Botnet

proxy on top

Mutex

gdfgvsdfdasfkjasdkjaske9831943ioqwkd

Attributes
  • delay

    1

  • install

    true

  • install_file

    NetworkEX.exe

  • install_folder

    %AppData%

  • pastebin_config

    https://pastebin.com/raw/jGuGV3jT

aes.plain

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Network Experience.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections