Overview

overview

10

Static

static

10

4a290ed67e...c2.exe

windows7-x64

10

4a290ed67e...c2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4a290ed67e8d8e911f1a1b66e1f1335d680d4b445d21345e5056debfe3ff3fc2.zip

  • Size

    35KB

  • Sample

    250208-skxgnstjgl

  • MD5

    8ea78f072d815a1ce4bfe65959c00a03

  • SHA1

    1eff5562435727ae388e01e2467e12bec813d5a8

  • SHA256

    4c0cd324745c0c3c2df4d32a6ffa4601c009fc77b48c647a2304075f625a21c4

  • SHA512

    a97bfc94ec5ebeb907a26980c54c61511b354759f18a8a6b284f208a945cd8966cb523ae4dcd1f54ef7063baf84505f0e26270c9e3c74cb78c76a1be87caaec7

  • SSDEEP

    768:C5tn6LmS6r7cNR6JriEbbBspGBDu/s06WdvSBQEZo68c:C5tSuY0rznBspGk/GWFSs6D

Score
10/10
asyncratvenomratdefaultdiscoveryrat

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

192.168.1.222:4449

Mutex

vxioicgafbil

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      4a290ed67e8d8e911f1a1b66e1f1335d680d4b445d21345e5056debfe3ff3fc2.exe

    • Size

      74KB

    • MD5

      32b7bb008924290fbb83d7f89d2df62b

    • SHA1

      3b568d941aa642ee09d453c51b665b987a6fb763

    • SHA256

      4a290ed67e8d8e911f1a1b66e1f1335d680d4b445d21345e5056debfe3ff3fc2

    • SHA512

      3553180c67d4f738f115fdfbc59a90c9ca7e23997be00e6540767abe1e3c2e351f89cb834ec084b16d401987a4ee03c81a51dd21e709bd98aefd2026443f2085

    • SSDEEP

      1536:8UUPcxVteCW7PMVee9VdQuDI6H1bf/Ks2PAQzcBLVclN:8UmcxV4x7PMVee9VdQsH1bfSs2PAQYBY

    Score
    10/10
    asyncratvenomratdefaultratdiscovery

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • VenomRAT

      Detects VenomRAT.

      rat

    • Venomrat family

      venomrat

    • Downloads MZ/PE file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks