General

  • Target

    hawktuah.exe

  • Size

    74KB

  • Sample

    241215-vqwtfazrfv

  • MD5

    663e509c502abcc24092c39d32feb603

  • SHA1

    1dcaca7cff53480cb2801c8d229dfda512af0e07

  • SHA256

    72272ce432f2a7faa229466c11be9723164e09b3b4ac0309ccd2ee3ae0e59ea1

  • SHA512

    3ee65b1e43c2164e46535a127dccefd163cd783d5f94147fa6b42d15b52f22ba73097f121cd4108837e7ce66438ee3164faee059f019c84dc955e36dab4668d0

  • SSDEEP

    1536:rUEkcx4VHsC0SPMV39e4QKI3H1bLu3fwsQzcCLVclN:rUxcx4GfSPMVteTLH1bLcQTBY

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

147.185.221.24:30847

Mutex

toaaqdyqffdkpsux

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      hawktuah.exe

    • Size

      74KB

    • MD5

      663e509c502abcc24092c39d32feb603

    • SHA1

      1dcaca7cff53480cb2801c8d229dfda512af0e07

    • SHA256

      72272ce432f2a7faa229466c11be9723164e09b3b4ac0309ccd2ee3ae0e59ea1

    • SHA512

      3ee65b1e43c2164e46535a127dccefd163cd783d5f94147fa6b42d15b52f22ba73097f121cd4108837e7ce66438ee3164faee059f019c84dc955e36dab4668d0

    • SSDEEP

      1536:rUEkcx4VHsC0SPMV39e4QKI3H1bLu3fwsQzcCLVclN:rUxcx4GfSPMVteTLH1bLcQTBY

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • VenomRAT

      Detects VenomRAT.

    • Venomrat family

MITRE ATT&CK Matrix

Tasks