General
-
Target
damn.zip
-
Size
2.2MB
-
MD5
5797d65f4c208a90b54dd4656510ba59
-
SHA1
70f5451c90062d511e64542759bf4969bb4dd138
-
SHA256
fa8cc2b40e644427aa4ec7e9441f5b75389c6a7915cd732b01a5a50921331e80
-
SHA512
2731c8eb4655fd30ea15d6d4c182459a24b88347539fca23e9cae5919255e2b32d9cc399cac5719d80e34e80a7e885a80848a07872f8d4eca309d6b3c6718079
-
SSDEEP
24576:QhUrmkx1ikx+jIVinmrw9SXMZuTTuF4/6hUrmkx1ikx+jIVinmrw9SXMZuTTuF4i:k
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Botnet
Default
C2
159.203.126.35:22279
Mutex
hnfkoikowllyvsdhi
Attributes
-
delay
1
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
Async RAT payload 64 IoCs
-
Asyncrat family
-
Unsigned PE 64 IoCs
Checks for missing Authenticode signature.
Files
-
damn.zip
-
3D Objects/damn.zip
-
Client - Copy (10).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (11).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (12).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (13).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (14).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (15).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (16).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (17).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (18).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (19).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (2).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (20).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (21).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (22).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (23).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (24).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (25).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (26).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (27).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (28).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (29).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (3).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (30).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (31).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (4).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (5).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (6).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (7).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (8).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (9).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (10).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (11).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (12).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (13).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (14).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (15).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (16).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (17).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (18).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (19).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (2).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (20).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (21).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (22).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (23).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (24).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (25).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (26).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (27).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (28).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (29).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (3).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (30).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (31).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (4).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (5).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (6).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (7).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (8).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy (9).exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client - Copy.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Client.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections