General

  • Target

    595df5b3d89855f0e22438c690a400d84f492568489c2f7866369a821afb367b

  • Size

    146KB

  • Sample

    250325-xx6nbsvkx6

  • MD5

    feeacde1f7617ec8e3c5b95fa1da35ee

  • SHA1

    74d27b9c00864192d1526979808507e166f08524

  • SHA256

    595df5b3d89855f0e22438c690a400d84f492568489c2f7866369a821afb367b

  • SHA512

    d036e9f3dcb20877bf79ac1dd71a3dc733c15a966c018c0674e2336187a472fed75f78e0081c43e490e6fabaafe9c77742155c81d9d66551c290072450ddab11

  • SSDEEP

    3072:MUmcxV4x7PMVrseCWf13w1bj6nQO9BeF+YzB1hXeiYY0I26Qq4KY:Mlx7PMVJReb8xBeYA/mIBpD

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

VANUARD KILLER

C2

127.0.0.1:4449

Mutex

weplyjtqjeaqrkr

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      595df5b3d89855f0e22438c690a400d84f492568489c2f7866369a821afb367b

    • Size

      146KB

    • MD5

      feeacde1f7617ec8e3c5b95fa1da35ee

    • SHA1

      74d27b9c00864192d1526979808507e166f08524

    • SHA256

      595df5b3d89855f0e22438c690a400d84f492568489c2f7866369a821afb367b

    • SHA512

      d036e9f3dcb20877bf79ac1dd71a3dc733c15a966c018c0674e2336187a472fed75f78e0081c43e490e6fabaafe9c77742155c81d9d66551c290072450ddab11

    • SSDEEP

      3072:MUmcxV4x7PMVrseCWf13w1bj6nQO9BeF+YzB1hXeiYY0I26Qq4KY:Mlx7PMVJReb8xBeYA/mIBpD

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • VenomRAT

      Detects VenomRAT.

    • Venomrat family

MITRE ATT&CK Matrix

Tasks