Overview

overview

10

Static

static

10

System.Xml...nt.dll

windows10-1703-x64

1

System.Xml...nt.dll

windows10-2004-x64

1

VenomRAT_HVNC.exe

windows10-1703-x64

1

VenomRAT_HVNC.exe

windows10-2004-x64

10

VenomRAT_HVNC.exe.xml

windows10-1703-x64

1

VenomRAT_HVNC.exe.xml

windows10-2004-x64

1

Vestris.Re...ib.dll

windows10-1703-x64

1

Vestris.Re...ib.dll

windows10-2004-x64

1

cGeoIp.dll

windows10-1703-x64

1

cGeoIp.dll

windows10-2004-x64

1

protobuf-net.dll

windows10-1703-x64

1

protobuf-net.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    60s
  • max time network
    64s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-02-2023 05:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    protobuf-net.dll

  • Size

    269KB

  • MD5

    4a4756e227c10623d81228bc4bc49c1d

  • SHA1

    964014f538918d85f6eb6a7b4023b304067b28f7

  • SHA256

    042b8c1c1e0eb7648b164ee48c95168c48324f1fb439cabd5f2e41db0938d807

  • SHA512

    93d2c6f47c618dc9493f5a538cbfb5a32c1e3bb35a623b51561057245f2fa557c452ee18ae274182c3e0440b77353c5490d196f16eda142b6129e8d1108e5a04

  • SSDEEP

    3072:2ne8csJldhXG4JhEj9n8RHq6MY7qLfoDb4LUcqbrKKu55O/u85wcT/0c8yiwo3aa:2nT7JxXJ7qFLMrKXE/9YLy1W2WNU6

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\protobuf-net.dll,#1
    1⤵
      PID:3368

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads