General

  • Target

    Client.exe

  • Size

    74KB

  • MD5

    0b601635bd4ee178cc30afe7d4e72051

  • SHA1

    dbec5361eb7e64902441fd8d205e1a96d191d735

  • SHA256

    2d1f81c62216894d4840e544b0c3c8882364cfa730946d0cd02d2ce22694e50f

  • SHA512

    d5499c55852a8c91a8b79e3d91202897ce6364408b3927fabbb8a20067fa8cd655973e8e1ca414a01dc67a92b0186a0156203c2f1a6b17e32b0e4e28d0b2b946

  • SSDEEP

    1536:8UUPcxVteCW7PMVee9VdQuDI6H1bf/Jz/QzcBLVclN:8UmcxV4x7PMVee9VdQsH1bfBDQYBY

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

132.145.75.68:3965

132.145.75.68:2885

Mutex

ftolxmmyozfj

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain
1
hglL6iZO8n4PrNpEebNVawkllowu9WjI

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • VenomRAT 1 IoCs

    Detects VenomRAT.

  • Venomrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.