Overview

overview

10

Static

static

10

a200ccdf59...cb.exe

windows7-x64

1

a200ccdf59...cb.exe

windows10-2004-x64

1

a24432a439...39.exe

windows7-x64

1

a24432a439...39.exe

windows10-2004-x64

1

a261b01eac...35.exe

windows7-x64

10

a261b01eac...35.exe

windows10-2004-x64

10

a277e4ef19...9e.exe

windows7-x64

10

a277e4ef19...9e.exe

windows10-2004-x64

10

a2c94b5453...64.exe

windows7-x64

7

a2c94b5453...64.exe

windows10-2004-x64

7

a2e433f395...34.exe

windows7-x64

10

a2e433f395...34.exe

windows10-2004-x64

10

a2fad1a052...95.exe

windows7-x64

10

a2fad1a052...95.exe

windows10-2004-x64

10

a30ce01ad9...4d.exe

windows7-x64

7

a30ce01ad9...4d.exe

windows10-2004-x64

7

a31ba0b291...4c.exe

windows7-x64

10

a31ba0b291...4c.exe

windows10-2004-x64

10

a340d849cc...86.exe

windows7-x64

10

a340d849cc...86.exe

windows10-2004-x64

10

a34ed8c989...d1.exe

windows7-x64

10

a34ed8c989...d1.exe

windows10-2004-x64

10

a39a36bdb6...eb.exe

windows7-x64

10

a39a36bdb6...eb.exe

windows10-2004-x64

10

a3a42aeb37...7f.exe

windows7-x64

10

a3a42aeb37...7f.exe

windows10-2004-x64

10

a3a62b600d...4c.exe

windows7-x64

10

a3a62b600d...4c.exe

windows10-2004-x64

10

a3bf76de64...be.exe

windows7-x64

10

a3bf76de64...be.exe

windows10-2004-x64

10

a3d1683844...56.exe

windows7-x64

10

a3d1683844...56.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    89s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250314-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/03/2025, 06:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a3a62b600d751eaaf32c95c6c03ea74c.exe

  • Size

    63KB

  • MD5

    a3a62b600d751eaaf32c95c6c03ea74c

  • SHA1

    34e91af8d3b9c2e8ebb66704ed49d7105fa2927a

  • SHA256

    7ea212ddfba458eeb29a6db1956cf60868ab4e8b6c57596634c1d272c3b61259

  • SHA512

    768d9241cc1af5a697a45f6622f1344ccb3723a0353dbde5629f2c7ca45d8c106f1c2ee9410cebb6629d406fef898a080c71012ff1b3b22c3456ab7d3572d356

  • SSDEEP

    1536:uh0JL7VQky47k8FJeeiIVrGbbXwp3aG4QpqKmY7:uh0JL7VQky4nFceXGbbXYKLz

Score
10/10
asyncratvenom clientsrat

Malware Config

Extracted

Family

asyncrat

Version

5.0.5

Botnet

Venom Clients

C2

147.185.221.27:3368

Mutex

Venom_RAT_HVNC_Mutex_Venom RAT_HVNC

Attributes
  • delay

    1

  • install

    true

  • install_file

    Update.exe

  • install_folder

    %Temp%

aes.plain

Signatures

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat
  • Asyncrat family
    asyncrat
  • Suspicious use of AdjustPrivilegeToken 21 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a3a62b600d751eaaf32c95c6c03ea74c.exe
    "C:\Users\Admin\AppData\Local\Temp\a3a62b600d751eaaf32c95c6c03ea74c.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:436

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/436-1-0x0000000000460000-0x0000000000476000-memory.dmp

    Filesize

    88KB

    Download

  • memory/436-0-0x00007FFBB5373000-0x00007FFBB5375000-memory.dmp

    Filesize

    8KB

    Download

  • memory/436-2-0x00007FFBB5370000-0x00007FFBB5E31000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/436-3-0x00007FFBB5370000-0x00007FFBB5E31000-memory.dmp

    Filesize

    10.8MB

    Download