Overview

overview

10

Static

static

10

XSENDER-SM...ey.exe

windows10-2004-x64

10

XSENDER-SM...ey.exe

windows11-ltsc_2024-x64

10

XSENDER-SM...ms.exe

windows10-2004-x64

7

XSENDER-SM...ms.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    b50f937ccbeeaf1f26cebbb450400a553549da6f074978c7354411f2f894e69c.bin
  • Size 13.2MB
  • Sample260905-x1bbla1cpe
  • SHA256 b50f937ccbeeaf1f26cebbb450400a553549da6f074978c7354411f2f894e69c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
asyncratblackhat-usapyinstallerrat

Malware Config

Extracted

Family

  • asyncrat

Version

  • 5.0.5

Botnet

  • BlackHat-USA

C2

  • 172.193.111.239:4449

Mutex

  • Venom_RAT_HVNC_Mutex_Venom RAT_HVNC

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target
      XSENDER-SMTP-TO-SMS - 2023 V5/Key.exe
    • Size 63KB
    • SHA256 d5e2462b27b4092ab54c20db72139ae694030b18f7f20b6138242104c536b65b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    blackhat-usaasyncratrat

    • Family: AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat
    behavioral1behavioral2
    • Target
      XSENDER-SMTP-TO-SMS - 2023 V5/xsender-smtp-sms.exe
    • Size 13.5MB
    • SHA256 7fa453fca2dac1dfb8e41dec02b300534b7fb82c3c4623504bfa08010b8efae9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10

    • Loads dropped DLL

    behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks