General

  • Target

    Sleepy ez.exe

  • Size

    63KB

  • Sample

    241202-rjthysspal

  • MD5

    85e4b16b551d40deeb08582ccb668f89

  • SHA1

    2d5d311949ecd2fa560a49f0015dce163dde2cbe

  • SHA256

    e67e9d09457cb581fd67a2419bbf6c59726c412a3c8cd2d8a8b3f1036b08f2bd

  • SHA512

    e3ff7f1fbaaf3c36bdcb8c173c2437211b5c874042daa3a49182727f0590c7fd0d4abf01318ccaf8e91e2538cfae15a19d27c5b7b0fdb7a92da91ffeff572760

  • SSDEEP

    1536:khIBLTM3Ufc0cMdMUMhIvvl8GbbRwUGqDpqKmY7:khIBLTM3Ufc6dMUPvWGbbRvgz

Malware Config

Extracted

Family

asyncrat

Version

5.0.5

Botnet

Venom Clients

C2

are-details.gl.at.ply.gg:15383

Mutex

Venom_RAT_HVNC_Mutex_Venom RAT_HVNC

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Sleepy ez.exe

    • Size

      63KB

    • MD5

      85e4b16b551d40deeb08582ccb668f89

    • SHA1

      2d5d311949ecd2fa560a49f0015dce163dde2cbe

    • SHA256

      e67e9d09457cb581fd67a2419bbf6c59726c412a3c8cd2d8a8b3f1036b08f2bd

    • SHA512

      e3ff7f1fbaaf3c36bdcb8c173c2437211b5c874042daa3a49182727f0590c7fd0d4abf01318ccaf8e91e2538cfae15a19d27c5b7b0fdb7a92da91ffeff572760

    • SSDEEP

      1536:khIBLTM3Ufc0cMdMUMhIvvl8GbbRwUGqDpqKmY7:khIBLTM3Ufc6dMUPvWGbbRvgz

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

MITRE ATT&CK Matrix

Tasks