General

  • Target

    BootstrapperNew.exe

  • Size

    74KB

  • Sample

    250221-yjfenazqy9

  • MD5

    783d79bd11370951e329208f99fb40cb

  • SHA1

    d5e5b98e433c902edbd6f7cdd9c2760ec3972362

  • SHA256

    7098c9c8dbcee6a1ff057d3817a2f6de5ef80d46aee072c914f463602da314b8

  • SHA512

    7e2db27a790c326b6b45a7ec86356a3f2e9a4a9c5d0f24678b0b70c7e5e01faefc0b70f72a6714e45c2513318c4141609db9e5dc3385073462c62631707d9757

  • SSDEEP

    1536:vUEkcx4VHsC0SPMVnG8Wny8IvH1bb/oitQzcuLVclN:vUxcx4GfSPMVGtnyZH1bbrtQnBY

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

127.0.0.1:24115

Mutex

aakvlainfwyenottr

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      BootstrapperNew.exe

    • Size

      74KB

    • MD5

      783d79bd11370951e329208f99fb40cb

    • SHA1

      d5e5b98e433c902edbd6f7cdd9c2760ec3972362

    • SHA256

      7098c9c8dbcee6a1ff057d3817a2f6de5ef80d46aee072c914f463602da314b8

    • SHA512

      7e2db27a790c326b6b45a7ec86356a3f2e9a4a9c5d0f24678b0b70c7e5e01faefc0b70f72a6714e45c2513318c4141609db9e5dc3385073462c62631707d9757

    • SSDEEP

      1536:vUEkcx4VHsC0SPMVnG8Wny8IvH1bb/oitQzcuLVclN:vUxcx4GfSPMVGtnyZH1bbrtQnBY

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • VenomRAT

      Detects VenomRAT.

    • Venomrat family

MITRE ATT&CK Matrix

Tasks