Overview

overview

10

Static

static

10

Client - C...0).exe

windows11-21h2-x64

10

Client - C...1).exe

windows11-21h2-x64

10

Client - C...2).exe

windows11-21h2-x64

10

Client - C...3).exe

windows11-21h2-x64

10

Client - C...4).exe

windows11-21h2-x64

10

Client - C...5).exe

windows11-21h2-x64

10

Client - C...6).exe

windows11-21h2-x64

10

Client - C...7).exe

windows11-21h2-x64

10

Client - C...8).exe

windows11-21h2-x64

10

Client - C...9).exe

windows11-21h2-x64

10

Client - Copy (2).exe

windows11-21h2-x64

10

Client - C...0).exe

windows11-21h2-x64

10

Client - C...1).exe

windows11-21h2-x64

10

Client - C...2).exe

windows11-21h2-x64

10

Client - C...3).exe

windows11-21h2-x64

10

Client - C...4).exe

windows11-21h2-x64

10

Client - C...5).exe

windows11-21h2-x64

10

Client - C...6).exe

windows11-21h2-x64

10

Client - C...7).exe

windows11-21h2-x64

10

Client - C...8).exe

windows11-21h2-x64

10

Client - C...9).exe

windows11-21h2-x64

10

Client - Copy (3).exe

windows11-21h2-x64

10

Client - C...0).exe

windows11-21h2-x64

10

Client - C...1).exe

windows11-21h2-x64

10

Client - Copy (4).exe

windows11-21h2-x64

10

Client - Copy (5).exe

windows11-21h2-x64

10

Client - Copy (6).exe

windows11-21h2-x64

10

Client - Copy (7).exe

windows11-21h2-x64

10

Client - Copy (8).exe

windows11-21h2-x64

10

Client - Copy (9).exe

windows11-21h2-x64

10

Client - Copy.exe

windows11-21h2-x64

10

Client.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    damn.zip
  • Size 2.2MB
  • Sample250108-a2bmesykbn
  • SHA256 fa8cc2b40e644427aa4ec7e9441f5b75389c6a7915cd732b01a5a50921331e80
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
asyncratdefaultdiscoveryrat

Malware Config

Extracted

Family

  • asyncrat

Version

  • Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

  • Default

C2

  • 159.203.126.35:22279

Mutex

  • hnfkoikowllyvsdhi

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target
      Client - Copy (10).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1
    • Target
      Client - Copy (11).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral2
    • Target
      Client - Copy (12).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral3
    • Target
      Client - Copy (13).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral4
    • Target
      Client - Copy (14).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral5
    • Target
      Client - Copy (15).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral6
    • Target
      Client - Copy (16).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral7
    • Target
      Client - Copy (17).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral8
    • Target
      Client - Copy (18).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat
    behavioral9
    • Target
      Client - Copy (19).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat
    behavioral10
    • Target
      Client - Copy (2).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat
    behavioral11
    • Target
      Client - Copy (20).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat
    behavioral12
    • Target
      Client - Copy (21).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat
    behavioral13
    • Target
      Client - Copy (22).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat
    behavioral14
    • Target
      Client - Copy (23).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat
    behavioral15
    • Target
      Client - Copy (24).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat
    behavioral16
    • Target
      Client - Copy (25).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat
    behavioral17
    • Target
      Client - Copy (26).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat
    behavioral18
    • Target
      Client - Copy (27).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat
    behavioral19
    • Target
      Client - Copy (28).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat
    behavioral20
    • Target
      Client - Copy (29).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat
    behavioral21
    • Target
      Client - Copy (3).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat
    behavioral22
    • Target
      Client - Copy (30).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat
    behavioral23
    • Target
      Client - Copy (31).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat
    behavioral24
    • Target
      Client - Copy (4).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat
    behavioral25
    • Target
      Client - Copy (5).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat
    behavioral26
    • Target
      Client - Copy (6).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat
    behavioral27
    • Target
      Client - Copy (7).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat
    behavioral28
    • Target
      Client - Copy (8).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat
    behavioral29
    • Target
      Client - Copy (9).exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat
    behavioral30
    • Target
      Client - Copy.exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat
    behavioral31
    • Target
      Client.exe
    • Size 74KB
    • SHA256 2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

ratdefaultasyncrat
Score
10/10

behavioral1

asyncratdefaultdiscoveryrat
Score
10/10

behavioral2

asyncratdefaultdiscoveryrat
Score
10/10

behavioral3

asyncratdefaultdiscoveryrat
Score
10/10

behavioral4

asyncratdefaultdiscoveryrat
Score
10/10

behavioral5

asyncratdefaultdiscoveryrat
Score
10/10

behavioral6

asyncratdefaultdiscoveryrat
Score
10/10

behavioral7

asyncratdefaultdiscoveryrat
Score
10/10

behavioral8

asyncratdefaultdiscoveryrat
Score
10/10

behavioral9

asyncratdefaultrat
Score
10/10

behavioral10

asyncratdefaultrat
Score
10/10

behavioral11

asyncratdefaultrat
Score
10/10

behavioral12

asyncratdefaultrat
Score
10/10

behavioral13

asyncratdefaultrat
Score
10/10

behavioral14

asyncratdefaultrat
Score
10/10

behavioral15

asyncratdefaultrat
Score
10/10

behavioral16

asyncratdefaultrat
Score
10/10

behavioral17

asyncratdefaultrat
Score
10/10

behavioral18

asyncratdefaultrat
Score
10/10

behavioral19

asyncratdefaultrat
Score
10/10

behavioral20

asyncratdefaultrat
Score
10/10

behavioral21

asyncratdefaultrat
Score
10/10

behavioral22

asyncratdefaultrat
Score
10/10

behavioral23

asyncratdefaultrat
Score
10/10

behavioral24

asyncratdefaultrat
Score
10/10

behavioral25

asyncratdefaultrat
Score
10/10

behavioral26

asyncratdefaultrat
Score
10/10

behavioral27

asyncratdefaultrat
Score
10/10

behavioral28

asyncratdefaultrat
Score
10/10

behavioral29

asyncratdefaultrat
Score
10/10

behavioral30

asyncratdefaultrat
Score
10/10

behavioral31

asyncratdefaultrat
Score
10/10

behavioral32

asyncratdefaultrat
Score
10/10