General

  • Target

    6c4aff551902c406ab8e01ed1b12ed853c62210fc1063d87a9eaf122d891d871.exe

  • Size

    63KB

  • Sample

    250116-n7gmhsyrgx

  • MD5

    de4fed672c3cd3aaaf7ddddb4b729081

  • SHA1

    829f926a6fafad3bcaa8850acd57b83dcf413e19

  • SHA256

    6c4aff551902c406ab8e01ed1b12ed853c62210fc1063d87a9eaf122d891d871

  • SHA512

    41f961b33dc7431bc3c11bba91391f8b037e0eb12dc8f3f6a168eeeb01652928c41bcc508e5e3eec3c2b749adbcb05dae7e761014c484fe9139661865c4ae47e

  • SSDEEP

    1536:ihODHQtSfGafqCg7mOxjGbbswVLdMCGiDpqKmY7N:ihODHQtSzfc7bhGbbsidMggzE

Malware Config

Extracted

Family

asyncrat

Version

5.0.5

Botnet

Venom Clients

C2

127.0.0.1:35000

88.167.109.19:35000

Mutex

Venom_RAT_HVNC_Mutex_Venom RAT_HVNC

Attributes
  • delay

    1

  • install

    true

  • install_file

    serv.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      6c4aff551902c406ab8e01ed1b12ed853c62210fc1063d87a9eaf122d891d871.exe

    • Size

      63KB

    • MD5

      de4fed672c3cd3aaaf7ddddb4b729081

    • SHA1

      829f926a6fafad3bcaa8850acd57b83dcf413e19

    • SHA256

      6c4aff551902c406ab8e01ed1b12ed853c62210fc1063d87a9eaf122d891d871

    • SHA512

      41f961b33dc7431bc3c11bba91391f8b037e0eb12dc8f3f6a168eeeb01652928c41bcc508e5e3eec3c2b749adbcb05dae7e761014c484fe9139661865c4ae47e

    • SSDEEP

      1536:ihODHQtSfGafqCg7mOxjGbbswVLdMCGiDpqKmY7N:ihODHQtSzfc7bhGbbsidMggzE

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

MITRE ATT&CK Matrix

Tasks