Analysis

  • max time kernel
    53s
  • max time network
    61s
  • platform
    windows10-1703_x64
  • resource
    win10-20230220-en
  • resource tags

    arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
  • submitted
    08-03-2023 02:33

General

  • Target

    VenomRAT/Plugins/Keylogger.exe

  • Size

    10KB

  • MD5

    4f846f2117c4eab285289b0090521b1e

  • SHA1

    e25287c39bad32159417c5f0bf798625b6beff45

  • SHA256

    a17a5bf35d8b784c3111632ba7e0c30a2c1a9c2c95b549235affc16d6d055477

  • SHA512

    fd946b5f7c3c7d32f226897283de7ba3b4a4ecc2919c363877f1258cd24ed1a52bce53af2fe4ef34c4ac30d00fc456fd4e1593b79c37f7c22211f2c4f6092e5e

  • SSDEEP

    192:irtmcuq65SoDxi4maEYbRzmEsLkjgv5JHT1eJYHcwY7fazB+LEi:irtlF60GE9rUhVsLF5p1rYydmE

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\VenomRAT\Plugins\Keylogger.exe
    "C:\Users\Admin\AppData\Local\Temp\VenomRAT\Plugins\Keylogger.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:1744

Network

    No results found
  • 52.178.17.3:443
    322 B
    7
  • 93.184.221.240:80
    276 B
    6
No results found

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1744-121-0x0000000000C20000-0x0000000000C28000-memory.dmp

    Filesize

    32KB

  • memory/1744-122-0x0000000001430000-0x0000000001440000-memory.dmp

    Filesize

    64KB

  • memory/1744-123-0x0000000001430000-0x0000000001440000-memory.dmp

    Filesize

    64KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.