Overview

overview

10

Static

static

10

System.Xml...nt.dll

windows10-1703-x64

1

System.Xml...nt.dll

windows10-2004-x64

1

VenomRAT_HVNC.exe

windows10-1703-x64

1

VenomRAT_HVNC.exe

windows10-2004-x64

10

VenomRAT_HVNC.exe.xml

windows10-1703-x64

1

VenomRAT_HVNC.exe.xml

windows10-2004-x64

1

Vestris.Re...ib.dll

windows10-1703-x64

1

Vestris.Re...ib.dll

windows10-2004-x64

1

cGeoIp.dll

windows10-1703-x64

1

cGeoIp.dll

windows10-2004-x64

1

protobuf-net.dll

windows10-1703-x64

1

protobuf-net.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    14s
  • max time network
    19s
  • platform
    windows10-1703_x64
  • resource
    win10-20230220-en
  • resource tags

    arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
  • submitted
    28-02-2023 05:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    cGeoIp.dll

  • Size

    2.3MB

  • MD5

    6d6e172e7965d1250a4a6f8a0513aa9f

  • SHA1

    b0fd4f64e837f48682874251c93258ee2cbcad2b

  • SHA256

    d1ddd15e9c727a5ecf78d3918c17aee0512f5b181ad44952686beb89146e6bd0

  • SHA512

    35daa38ad009599145aa241102bcd1f69b4caa55ebc5bb11df0a06567056c0ec5fcd02a33576c54c670755a6384e0229fd2f96622f12304dec58f79e1e834155

  • SSDEEP

    24576:TRgJE8pkCLLe/K43EnnnclQwIqJY0OjklWXQMFBRpmkL/59ah0USm3uwl00odi9p:TRgfX/59a6USdi9Ues6bV6boLO6r

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\cGeoIp.dll,#1
    1⤵
      PID:1604

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads