General

  • Target

    1aac014bf02948e57db6011a42380afdae5c5e417e3a611a83c9c978e94a5ccaN.exe

  • Size

    63KB

  • Sample

    250117-fn1x2stnam

  • MD5

    22975c8d49fbbd920ebad017075e7240

  • SHA1

    aa18b7db713f4ef1732e2737be8a62097cbb17e0

  • SHA256

    1aac014bf02948e57db6011a42380afdae5c5e417e3a611a83c9c978e94a5cca

  • SHA512

    d5069d5f9e1b84b7e0140a5ea5c374a60111e50365216f98bf86ae958a209d0d7b8a8ac43148ffb1dd79aa253337e2e598b7493e638559e2f7dc97cc3374c7c2

  • SSDEEP

    1536:ihODHQtSfGafqCg7mOxjGbbswVLdMCGiDpqKmY7:ihODHQtSzfc7bhGbbsidMggz

Malware Config

Extracted

Family

asyncrat

Version

5.0.5

Botnet

Venom Clients

C2

127.0.0.1:35000

88.167.109.19:35000

Mutex

Venom_RAT_HVNC_Mutex_Venom RAT_HVNC

Attributes
  • delay

    1

  • install

    true

  • install_file

    serv.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      1aac014bf02948e57db6011a42380afdae5c5e417e3a611a83c9c978e94a5ccaN.exe

    • Size

      63KB

    • MD5

      22975c8d49fbbd920ebad017075e7240

    • SHA1

      aa18b7db713f4ef1732e2737be8a62097cbb17e0

    • SHA256

      1aac014bf02948e57db6011a42380afdae5c5e417e3a611a83c9c978e94a5cca

    • SHA512

      d5069d5f9e1b84b7e0140a5ea5c374a60111e50365216f98bf86ae958a209d0d7b8a8ac43148ffb1dd79aa253337e2e598b7493e638559e2f7dc97cc3374c7c2

    • SSDEEP

      1536:ihODHQtSfGafqCg7mOxjGbbswVLdMCGiDpqKmY7:ihODHQtSzfc7bhGbbsidMggz

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

MITRE ATT&CK Matrix

Tasks