Overview

overview

10

Static

static

10

Rolbox.exe

windows10-2004-x64

10

Rolbox.exe

windows10-ltsc 2021-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Rolbox.exe

  • Size

    497KB

  • MD5

    c8ec8994aa275dc13d849e9f4fb99948

  • SHA1

    14847b9b283d88c040bfd992ba968f86a4ade52d

  • SHA256

    1bbc8b0a6809596eb4d2540975af348fc9b07fd832e4461671d3f65d8f9f8dbc

  • SHA512

    7f981852d05135b90e9d460d67390e24f65c0123f72d364e2c73be8aebebc926ea3b10d3659ef9b6280953d1a2f0cf8b6ed8fb1ee98f1b03b283d9efea486bbe

  • SSDEEP

    12288:a5fGb1H6R7sCRcquxJJctlPkiXpiCC0QSRvb6zboi7J4EPL40j9q4Jnr5cMDwXBM:awb1RhCNE7r

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

147.185.221.251:18020

Mutex

gmmyiwyilnzzmujwdxl

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Rolbox.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections