General

  • Target

    owowooww.exe

  • Size

    74KB

  • Sample

    250208-tbs9bstlhs

  • MD5

    a5d197c74f9b3846ff3b7e32a3387226

  • SHA1

    622c604a072f63be1f7d6c38ae16ed742edeb41d

  • SHA256

    9ff1b78a5ac5c9177f0b021a029cc48a328a392542f53025763c85d516c3694b

  • SHA512

    5d21f46a1553d319751a83a2b7dd18e11c0819a27c85e1bcd671e51438c0f82bf3eec8481fb36fa5bc88e723c8dc56347d97efe164962e321224c37380fc711e

  • SSDEEP

    1536:1ULkcxVKpC6yPMVKe9VdQuDI6H1bf/+CPlQzcGLVclN:1UocxVENyPMVKe9VdQsH1bfFlQfBY

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

Mutex

htbhezixkkhscrmzee

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

  • pastebin_config

    https://pastebin.com/raw/L746Mrwz

aes.plain

Targets

    • Target

      owowooww.exe

    • Size

      74KB

    • MD5

      a5d197c74f9b3846ff3b7e32a3387226

    • SHA1

      622c604a072f63be1f7d6c38ae16ed742edeb41d

    • SHA256

      9ff1b78a5ac5c9177f0b021a029cc48a328a392542f53025763c85d516c3694b

    • SHA512

      5d21f46a1553d319751a83a2b7dd18e11c0819a27c85e1bcd671e51438c0f82bf3eec8481fb36fa5bc88e723c8dc56347d97efe164962e321224c37380fc711e

    • SSDEEP

      1536:1ULkcxVKpC6yPMVKe9VdQuDI6H1bf/+CPlQzcGLVclN:1UocxVENyPMVKe9VdQsH1bfFlQfBY

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • VenomRAT

      Detects VenomRAT.

    • Venomrat family

    • Downloads MZ/PE file

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks