General
-
Target
https://gofile.io/d/Wrsxqb
-
Sample
250101-z514xsxker
Score
10/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://gofile.io/d/Wrsxqb
Resource
win11-20241007-en
windows11-21h2-x64
20 signatures
150 seconds
Malware Config
Extracted
Family
asyncrat
Version
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Botnet
Default
C2
127.0.0.1:7000
127.0.0.1:62240
Mutex
dfnefgnodkfgnopekrnfg
Attributes
-
delay
1
-
install
true
-
install_file
AudioBootSrv.exe
-
install_folder
%AppData%
aes.plain
Targets
-
-
Target
https://gofile.io/d/Wrsxqb
Score10/10-
Asyncrat family
-
Async RAT payload
-
Downloads MZ/PE file
-
Executes dropped EXE
-