Overview

overview

10

Static

static

10

DiscordXploit.exe

windows7-x64

10

DiscordXploit.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DiscordXploit.rar

  • Size

    115KB

  • Sample

    250118-s5fpnaxjby

  • MD5

    ce7557476eb42db6fd3753dad8db44f0

  • SHA1

    b0095dc373ee2635cdede710178d011e8e7cd76f

  • SHA256

    ba2f01e1b6ebd5e55a11c5164a0b11bde34fe42135d0d81a9c228990abc886a1

  • SHA512

    5f346ebdcefc57b6afdaa393abcdb31c3153919dc54af6c1417fdcdd41200446a6b84fe24b58bf9c0b47788eb3d93faf68b31eb77532059cdeb0f20ac084b7c6

  • SSDEEP

    3072:6hgtxr1GXkkui0nI1nmaWqVR1Yy+VfmbUYz4C1yDotNV:ft91ykkX0omt2AYp1yDi7

Score
10/10
asyncratvenomratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

193.161.193.99:49446

Mutex

8735d3c7-a86c-4a5a-b775-0b873f7eb49c

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      DiscordXploit.exe

    • Size

      222KB

    • MD5

      b56c44fd1623f7ece09ba38c233cffbb

    • SHA1

      b4127c6a1c0b792d24edde64cd996ea23a830920

    • SHA256

      6a3246d84a7dc156a06120f0d4373661743d748de6109575473adcf5071d6419

    • SHA512

      2453b46f87d2a703bf48dc2f381fc6be43ba4f43d01af5f46c6d769872bec19829ca80112723d5975dc9957082d4544600b09ad852737582259bf0839c101a56

    • SSDEEP

      3072:fUBcxVMWiPMV7uYH1bomQX5RJT/zNkF15g/xIoJzdIXANvoKxVY:fgWiPMVVVb7sR/z0/gfJzdIQNoKL

    Score
    10/10
    asyncratvenomratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • VenomRAT

      Detects VenomRAT.

      rat

    • Venomrat family

      venomrat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks