General

  • Target

    1743442683120ec6c2114e57d9fdce42484c2831360ce3d815a27ee00362cda104a82e4b1d784.dat-decoded.exe

  • Size

    74KB

  • Sample

    250331-v7shcaxj15

  • MD5

    8d3287f58a888c6d36eb5a0699901034

  • SHA1

    ec67928a12749d2b5cd7214efccaff1a6ea250a2

  • SHA256

    21ecb046a2829cc95256bcb4ceef1e29e55b3bc2ce2dea69ede39d06c163bbe3

  • SHA512

    b462961d0ab01d51c7802c05818e9b66fa09a7e3dabd1f99c4de585b8e2f3c5c882a6deff3a1f770f21672690890b9e9e50b763ce18d6ad50710a9a0f3f7dd3f

  • SSDEEP

    1536:jUEkcx4VHsC0SPMVgIANAUnI3D1by/FAJQzcqLVclN:jUxcx4GfSPMVg/NAzD1byNAJQbBY

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

196.251.89.167:6900

Mutex

vcbkomkyscjsqqkd

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      1743442683120ec6c2114e57d9fdce42484c2831360ce3d815a27ee00362cda104a82e4b1d784.dat-decoded.exe

    • Size

      74KB

    • MD5

      8d3287f58a888c6d36eb5a0699901034

    • SHA1

      ec67928a12749d2b5cd7214efccaff1a6ea250a2

    • SHA256

      21ecb046a2829cc95256bcb4ceef1e29e55b3bc2ce2dea69ede39d06c163bbe3

    • SHA512

      b462961d0ab01d51c7802c05818e9b66fa09a7e3dabd1f99c4de585b8e2f3c5c882a6deff3a1f770f21672690890b9e9e50b763ce18d6ad50710a9a0f3f7dd3f

    • SSDEEP

      1536:jUEkcx4VHsC0SPMVgIANAUnI3D1by/FAJQzcqLVclN:jUxcx4GfSPMVg/NAzD1byNAJQbBY

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks