Overview

overview

10

Static

static

10

Grabberhydra.exe

windows10-ltsc_2021-x64

10

Hydra.exe

windows10-ltsc_2021-x64

10

Resubmissions

31/03/2025, 18:00

250331-wlak3svtby 10

31/03/2025, 17:58

250331-wkcztavtbt 10

28/03/2025, 19:30

250328-x72gcsskw6 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bba2d6bfae4be91d6ad87d5ab7791ec443d2b0f07515247d451341fce7eaab40

  • Size

    9.3MB

  • MD5

    a8b38553a21704b9176f5b0e30176395

  • SHA1

    350b4ee960048b48ce0e691a3c5183d12d931e8d

  • SHA256

    bba2d6bfae4be91d6ad87d5ab7791ec443d2b0f07515247d451341fce7eaab40

  • SHA512

    fb5e2c3da8fa937629bdd55e889cb6a57066cbb56c048a58d3ccbe1a09eb17d4ef6e78fb5ba9171a48668767286eb2d39803d7ad103d8f11600b7f749bdd45f7

  • SSDEEP

    196608:/0Cq6VRQBBfqF15gbOgsF4GoKZk/G6QwxJJvfv0X5BM/O2Ie+EegtG8:TVoxQ5gbOl4GoKZ1RYJJvj/L+EegtV

Score
10/10
pyinstallerratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

20.199.83.63:8080

Mutex

ceqyzqxvsux

Attributes
  • delay

    1

  • install

    true

  • install_file

    das.exe

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bba2d6bfae4be91d6ad87d5ab7791ec443d2b0f07515247d451341fce7eaab40
    .rar
  • Grabberhydra.exe
    .exe windows:6 windows x64 arch:x64

    72c4e339b7af8ab1ed2eb3821c98713a


    Headers

    Imports

    Sections

  • Stub.pyc
  • Hydra.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections