General

  • Target

    Setup.exe

  • Size

    63KB

  • Sample

    250128-sn6jrawjbl

  • MD5

    b85c90b65f871ae5c9b27e79c95ec9b6

  • SHA1

    bb8567553e3c8a86636396b90a8fa27a8379f390

  • SHA256

    b6bd6b6f509dd5535166e6025f0b3ba75da5d761ec2f2b943e0d59a3c3decbd4

  • SHA512

    ee055d86529a8a06874681fc848189aae76990916390384c986c4e67195560d66cfd0c4f97697cd94938995c9537dbf532c69cbc6a02d60ee91cda74d946a596

  • SSDEEP

    1536:8hB5LrUwk4XO01VXFO0bxvweGbbxw1VvG6DpqKmY7:8hB5LrUwk4XVVXFO0dvfGbbxKzgz

Malware Config

Extracted

Family

asyncrat

Version

5.0.5

Botnet

Venom Clients

C2

127.0.0.1:4449

Mutex

Venom_RAT_HVNC_Mutex_Venom RAT_HVNC

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Setup.exe

    • Size

      63KB

    • MD5

      b85c90b65f871ae5c9b27e79c95ec9b6

    • SHA1

      bb8567553e3c8a86636396b90a8fa27a8379f390

    • SHA256

      b6bd6b6f509dd5535166e6025f0b3ba75da5d761ec2f2b943e0d59a3c3decbd4

    • SHA512

      ee055d86529a8a06874681fc848189aae76990916390384c986c4e67195560d66cfd0c4f97697cd94938995c9537dbf532c69cbc6a02d60ee91cda74d946a596

    • SSDEEP

      1536:8hB5LrUwk4XO01VXFO0bxvweGbbxw1VvG6DpqKmY7:8hB5LrUwk4XVVXFO0dvfGbbxKzgz

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

MITRE ATT&CK Enterprise v15

Tasks