Overview

overview

10

Static

static

3

fb2acb529e...a2.exe

windows7-x64

7

fb2acb529e...a2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb2acb529ea59742777f6a2f4b9e4350ca46e05c33918032a24cb0deb4a780a2

  • Size

    7.0MB

  • Sample

    241110-klzdnawpfk

  • MD5

    d40b9b0955f64367b336cffed79961d1

  • SHA1

    9003fed4306ae89e79c4893ab271b0ed5c15e4fe

  • SHA256

    fb2acb529ea59742777f6a2f4b9e4350ca46e05c33918032a24cb0deb4a780a2

  • SHA512

    048f1773ac4fdc2a95b4a1b9f21c741782bc31a016d3b4e82a327c5f66b749186e63506bb0efbb4d6b39231ed0278e90dd5e05ba203aef5fef35ce40c83e60d8

  • SSDEEP

    196608:SeVhMYpwfI9j2i4H1qSiXLGVi7DnStHuQJTMRRccx:JVOIEiK1piXLGVEutHbJTe

Score
10/10
asyncratdefaultpyinstallerratupx

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

8.140.196.172:42606

Mutex

zkzeqemwohzo

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      fb2acb529ea59742777f6a2f4b9e4350ca46e05c33918032a24cb0deb4a780a2

    • Size

      7.0MB

    • MD5

      d40b9b0955f64367b336cffed79961d1

    • SHA1

      9003fed4306ae89e79c4893ab271b0ed5c15e4fe

    • SHA256

      fb2acb529ea59742777f6a2f4b9e4350ca46e05c33918032a24cb0deb4a780a2

    • SHA512

      048f1773ac4fdc2a95b4a1b9f21c741782bc31a016d3b4e82a327c5f66b749186e63506bb0efbb4d6b39231ed0278e90dd5e05ba203aef5fef35ce40c83e60d8

    • SSDEEP

      196608:SeVhMYpwfI9j2i4H1qSiXLGVi7DnStHuQJTMRRccx:JVOIEiK1piXLGVEutHbJTe

    Score
    10/10
    upxasyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks