General

  • Target

    Client.exe

  • Size

    74KB

  • MD5

    0b601635bd4ee178cc30afe7d4e72051

  • SHA1

    dbec5361eb7e64902441fd8d205e1a96d191d735

  • SHA256

    2d1f81c62216894d4840e544b0c3c8882364cfa730946d0cd02d2ce22694e50f

  • SHA512

    d5499c55852a8c91a8b79e3d91202897ce6364408b3927fabbb8a20067fa8cd655973e8e1ca414a01dc67a92b0186a0156203c2f1a6b17e32b0e4e28d0b2b946

  • SSDEEP

    1536:8UUPcxVteCW7PMVee9VdQuDI6H1bf/Jz/QzcBLVclN:8UmcxV4x7PMVee9VdQsH1bfBDQYBY

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

132.145.75.68:3965

132.145.75.68:2885

Mutex

ftolxmmyozfj

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections