General

  • Target

    DiscordXploit.exe

  • Size

    222KB

  • Sample

    250118-d5nb6s1qaw

  • MD5

    b56c44fd1623f7ece09ba38c233cffbb

  • SHA1

    b4127c6a1c0b792d24edde64cd996ea23a830920

  • SHA256

    6a3246d84a7dc156a06120f0d4373661743d748de6109575473adcf5071d6419

  • SHA512

    2453b46f87d2a703bf48dc2f381fc6be43ba4f43d01af5f46c6d769872bec19829ca80112723d5975dc9957082d4544600b09ad852737582259bf0839c101a56

  • SSDEEP

    3072:fUBcxVMWiPMV7uYH1bomQX5RJT/zNkF15g/xIoJzdIXANvoKxVY:fgWiPMVVVb7sR/z0/gfJzdIQNoKL

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

193.161.193.99:49446

Mutex

8735d3c7-a86c-4a5a-b775-0b873f7eb49c

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      DiscordXploit.exe

    • Size

      222KB

    • MD5

      b56c44fd1623f7ece09ba38c233cffbb

    • SHA1

      b4127c6a1c0b792d24edde64cd996ea23a830920

    • SHA256

      6a3246d84a7dc156a06120f0d4373661743d748de6109575473adcf5071d6419

    • SHA512

      2453b46f87d2a703bf48dc2f381fc6be43ba4f43d01af5f46c6d769872bec19829ca80112723d5975dc9957082d4544600b09ad852737582259bf0839c101a56

    • SSDEEP

      3072:fUBcxVMWiPMV7uYH1bomQX5RJT/zNkF15g/xIoJzdIXANvoKxVY:fgWiPMVVVb7sR/z0/gfJzdIQNoKL

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • VenomRAT

      Detects VenomRAT.

    • Venomrat family

MITRE ATT&CK Matrix

Tasks