General

  • Target

    2025-01-07_20396f2411146b5bb648fe1553b7f19a_asyncrat_hiddentear

  • Size

    172KB

  • Sample

    250107-tve6taymcw

  • MD5

    20396f2411146b5bb648fe1553b7f19a

  • SHA1

    dfc0abeb5f8578502d22d98ee371efae109f968e

  • SHA256

    b8d32843a48e1e06212a3687a71a908031f8b11577c3bd8ee1ced63a6e482bca

  • SHA512

    19e7b028848774169ee60793418071730892cb4dc3c95f6476a830c051beab1a7bc319a36287d9bfd39907404c27dc6a754b7196cb90cfcd57ad22fd97a8b216

  • SSDEEP

    3072:bUxcx4GfSPMV7e9VdQsH1bf8eQRM+lmsolAIrRuw+mqv9j1MWLQfBY:b5fSPMV7aesVb7B+lDAAy

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

147.124.210.158:4449

Mutex

chptbpgxeghrinbp

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      2025-01-07_20396f2411146b5bb648fe1553b7f19a_asyncrat_hiddentear

    • Size

      172KB

    • MD5

      20396f2411146b5bb648fe1553b7f19a

    • SHA1

      dfc0abeb5f8578502d22d98ee371efae109f968e

    • SHA256

      b8d32843a48e1e06212a3687a71a908031f8b11577c3bd8ee1ced63a6e482bca

    • SHA512

      19e7b028848774169ee60793418071730892cb4dc3c95f6476a830c051beab1a7bc319a36287d9bfd39907404c27dc6a754b7196cb90cfcd57ad22fd97a8b216

    • SSDEEP

      3072:bUxcx4GfSPMV7e9VdQsH1bf8eQRM+lmsolAIrRuw+mqv9j1MWLQfBY:b5fSPMV7aesVb7B+lDAAy

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks