General

  • Target

    generator.exe

  • Size

    74KB

  • Sample

    250412-2jby1ssnv3

  • MD5

    0fd2d83791646875a47b328adf8f819d

  • SHA1

    5a00acad4dee9935841c1eada9925b0e79010130

  • SHA256

    8baa7fef51dc0f5d2f38453428cac6ec1f975f483c920b121e0efbd8a94404e0

  • SHA512

    2fb904c3fc1975a667fb406bfa35a2c08fd1979011a12fcfc8073dad3661915d683730bc2c65dc54336a6b890b6d14c9805c25cb7beecc68de76edea3e65f143

  • SSDEEP

    1536:sUCccx0dxCKg6PMVY1geIeH1bb/lbQzch6VclN:sUTcx0f9g6PMVsgWH1bb9bQUIY

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

127.0.0.1:4449

127.0.0.1:5429

Mutex

skpankavsetvzxub

Attributes
  • delay

    1

  • install

    true

  • install_file

    system 32.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      generator.exe

    • Size

      74KB

    • MD5

      0fd2d83791646875a47b328adf8f819d

    • SHA1

      5a00acad4dee9935841c1eada9925b0e79010130

    • SHA256

      8baa7fef51dc0f5d2f38453428cac6ec1f975f483c920b121e0efbd8a94404e0

    • SHA512

      2fb904c3fc1975a667fb406bfa35a2c08fd1979011a12fcfc8073dad3661915d683730bc2c65dc54336a6b890b6d14c9805c25cb7beecc68de76edea3e65f143

    • SSDEEP

      1536:sUCccx0dxCKg6PMVY1geIeH1bb/lbQzch6VclN:sUTcx0f9g6PMVsgWH1bb9bQUIY

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • VenomRAT

      Detects VenomRAT.

    • Venomrat family

MITRE ATT&CK Matrix

Tasks