General

  • Target

    ef479d8be4a3a45a7ea5aa073daec3839bd26ec51e68fad56c05af6d2e49a789.exe

  • Size

    255KB

  • Sample

    241226-pvxcwawjay

  • MD5

    c78879e923b789ae7e83306f502cdf8e

  • SHA1

    1100da48af74d6d5c12d55e7540215bad9a4a6f2

  • SHA256

    ef479d8be4a3a45a7ea5aa073daec3839bd26ec51e68fad56c05af6d2e49a789

  • SHA512

    9a32e61a8756171ec583fa7b1e8ac530f965c21671fa1c858b65da831c2ab31d6d4590f08276f169b96ffbd170cb2feb6444483cf9c78694419bc7558748635d

  • SSDEEP

    6144:llx7PMVeaesVbk8aEjXOxYRy5X7zuqGo8x:llxhdsq8/jKX7zuqG5x

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

127.0.0.1:1700

Mutex

vmqlxfnwloo

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      ef479d8be4a3a45a7ea5aa073daec3839bd26ec51e68fad56c05af6d2e49a789.exe

    • Size

      255KB

    • MD5

      c78879e923b789ae7e83306f502cdf8e

    • SHA1

      1100da48af74d6d5c12d55e7540215bad9a4a6f2

    • SHA256

      ef479d8be4a3a45a7ea5aa073daec3839bd26ec51e68fad56c05af6d2e49a789

    • SHA512

      9a32e61a8756171ec583fa7b1e8ac530f965c21671fa1c858b65da831c2ab31d6d4590f08276f169b96ffbd170cb2feb6444483cf9c78694419bc7558748635d

    • SSDEEP

      6144:llx7PMVeaesVbk8aEjXOxYRy5X7zuqGo8x:llxhdsq8/jKX7zuqG5x

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • VenomRAT

      Detects VenomRAT.

    • Venomrat family

MITRE ATT&CK Matrix

Tasks