Overview

overview

10

Static

static

10

RDN10_random.exe

windows7-x64

10

RDN10_random.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RDN10_random.exe

  • Size

    3.0MB

  • Sample

    250118-vxgyvsynhx

  • MD5

    441da4796862373ec5f2ebc9a26af14a

  • SHA1

    addd34940584810bf67ea80923728dd5fa9ff3da

  • SHA256

    d3c9a4541f5ffab522695055a082f9dfe250fcaee5cfe46a9d52581c6169b5ac

  • SHA512

    682bff4c1756a72be47219ba79a3cd50af21fee439c8c00da46cb93e67c9d20a3b28220ac10d875577ed2017b16f9b8654bde6891ad6baad5c7e8eaa7a148bd2

  • SSDEEP

    49152:TPCQNqtC2GqQOsgUBo3B3kNC3H6vUZTr/N3e:TPVl2GqQtk

Score
10/10
asyncratstormkittyvenomratdiscoveryratstealer

Malware Config

Targets

    • Target

      RDN10_random.exe

    • Size

      3.0MB

    • MD5

      441da4796862373ec5f2ebc9a26af14a

    • SHA1

      addd34940584810bf67ea80923728dd5fa9ff3da

    • SHA256

      d3c9a4541f5ffab522695055a082f9dfe250fcaee5cfe46a9d52581c6169b5ac

    • SHA512

      682bff4c1756a72be47219ba79a3cd50af21fee439c8c00da46cb93e67c9d20a3b28220ac10d875577ed2017b16f9b8654bde6891ad6baad5c7e8eaa7a148bd2

    • SSDEEP

      49152:TPCQNqtC2GqQOsgUBo3B3kNC3H6vUZTr/N3e:TPVl2GqQtk

    Score
    10/10
    asyncratstormkittyvenomratdiscoveryratstealer

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • StormKitty

      StormKitty is an open source info stealer written in C#.

      stealerstormkitty

    • StormKitty payload

    • Stormkitty family

      stormkitty

    • VenomRAT

      Detects VenomRAT.

      rat

    • Venomrat family

      venomrat

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks