Overview

overview

10

Static

static

10

73b5932f15...64.exe

windows7_x64

10

73b5932f15...64.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    73b5932f1556db5d2532888b72127b3c707315f0785edd14fd6bb519c8e55064

  • Size

    534KB

  • Sample

    210302-6x9byrf2bn

  • MD5

    2e89910089adeb48e11a364e3a0dfcfc

  • SHA1

    66763d2d596468f40728731b1f9ab072d573a275

  • SHA256

    73b5932f1556db5d2532888b72127b3c707315f0785edd14fd6bb519c8e55064

  • SHA512

    8aa3c9cae7db6f1f3dc688f011eb85cfbbaf250f36e38ffcd84408ffa35b1f0700fe64991ac39b67ead97edf595fd632232944b28ae29cacd2aef176397d8278

Score
10/10
venomratratrootkitstealer

Malware Config

Targets

    • Target

      73b5932f1556db5d2532888b72127b3c707315f0785edd14fd6bb519c8e55064

    • Size

      534KB

    • MD5

      2e89910089adeb48e11a364e3a0dfcfc

    • SHA1

      66763d2d596468f40728731b1f9ab072d573a275

    • SHA256

      73b5932f1556db5d2532888b72127b3c707315f0785edd14fd6bb519c8e55064

    • SHA512

      8aa3c9cae7db6f1f3dc688f011eb85cfbbaf250f36e38ffcd84408ffa35b1f0700fe64991ac39b67ead97edf595fd632232944b28ae29cacd2aef176397d8278

    Score
    10/10
    venomratratrootkitstealer

    • VenomRAT

      VenomRAT is a modified version of QuasarRAT with some added features, such as rootkit and stealer capabilites.

      ratrootkitstealervenomrat

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks