Resubmissions

06-01-2025 18:42

250106-xcbx8atqby 10

06-01-2025 18:37

250106-w9w4zstpdz 10

General

  • Target

    175b9ab6fec60b890beea9ee142ce6cedc00d213ab8bf95b129d690061388010

  • Size

    492KB

  • Sample

    250106-w9w4zstpdz

  • MD5

    03675c1d7bd0f0dd4f91a4d86249a69a

  • SHA1

    13acf91b9467df368059be73f3448d4d49b637e4

  • SHA256

    175b9ab6fec60b890beea9ee142ce6cedc00d213ab8bf95b129d690061388010

  • SHA512

    138fb15c2411f233b39b652d51b0901d686d78fd5e85cabd4559d672b084a4febbf67726f334eaaa2514f0aa75d2b2e5758336a29483521c0cf9ca740e79e334

  • SSDEEP

    12288:VdR/L2wA8UePh0KtiKZ6Jk6J9aQqAmkeyI8b9M:dL3AfeqnazAmtyI8b9M

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

8.218.196.187:4449

127.0.0.1:4449

Mutex

vidjpdoqlri

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      175b9ab6fec60b890beea9ee142ce6cedc00d213ab8bf95b129d690061388010

    • Size

      492KB

    • MD5

      03675c1d7bd0f0dd4f91a4d86249a69a

    • SHA1

      13acf91b9467df368059be73f3448d4d49b637e4

    • SHA256

      175b9ab6fec60b890beea9ee142ce6cedc00d213ab8bf95b129d690061388010

    • SHA512

      138fb15c2411f233b39b652d51b0901d686d78fd5e85cabd4559d672b084a4febbf67726f334eaaa2514f0aa75d2b2e5758336a29483521c0cf9ca740e79e334

    • SSDEEP

      12288:VdR/L2wA8UePh0KtiKZ6Jk6J9aQqAmkeyI8b9M:dL3AfeqnazAmtyI8b9M

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks