Overview

overview

10

Static

static

1

PLEASEWORK.rar

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PLEASEWORK.rar

  • Size

    32KB

  • Sample

    241129-pb8xkavjgs

  • MD5

    86117256ec6c1c3431ef95922b4b80e9

  • SHA1

    fafede09d0724b67ac485ae1b071656aac384420

  • SHA256

    6bf16a7e4243192f646af557655c39a15c45e0f54f4e926630f0dbc02dc95fda

  • SHA512

    1d073b501d155d56e18b1d3fb6eea9a6c7038b9ceeaee2ceea586f4611bdb2bd422cf4df2f9eb94f11280c8143ab44bbfd97957752a7c279690c3369ee6f0908

  • SSDEEP

    768:KMcHcEgoHntlhY1jtrK9sZX8pho6IbXjWp1LGbhrK:NctgeSXe9qqo6yZe

Score
10/10
asyncratdefaultdiscoveryrat

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

192.168.1.15:7000

Mutex

sfesfwssfds

Attributes
  • delay

    1

  • install

    false

  • install_file

    dawdasdawd

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      PLEASEWORK.rar

    • Size

      32KB

    • MD5

      86117256ec6c1c3431ef95922b4b80e9

    • SHA1

      fafede09d0724b67ac485ae1b071656aac384420

    • SHA256

      6bf16a7e4243192f646af557655c39a15c45e0f54f4e926630f0dbc02dc95fda

    • SHA512

      1d073b501d155d56e18b1d3fb6eea9a6c7038b9ceeaee2ceea586f4611bdb2bd422cf4df2f9eb94f11280c8143ab44bbfd97957752a7c279690c3369ee6f0908

    • SSDEEP

      768:KMcHcEgoHntlhY1jtrK9sZX8pho6IbXjWp1LGbhrK:NctgeSXe9qqo6yZe

    Score
    10/10
    asyncratdefaultdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • Async RAT payload

      rat

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks