General

  • Target

    Venom_RAT_5.6_[tombstone3#3883].rar

  • Size

    43.5MB

  • Sample

    230318-m4a5wsca53

  • MD5

    9761b24ac4ed7ab929ad618f6ec5465c

  • SHA1

    fef34782a4b186ddac3fe3e021b741be7509908c

  • SHA256

    25d3b2e90d875a39da06c8d8c6c24478947af5d193302269f1b08d4b298e7a90

  • SHA512

    541ecd24b64e7538ec9275dd482ceb189717bb312b0c339d42f57b21440054ef2c4f396d11c9ff02e34bfed10c29dd264f0a0a2569aecaee5e514d95ed7b92aa

  • SSDEEP

    786432:aAlNdg8MqMK6QkxSCMRiBJUEaIvBYJ9P3YEeNrvMCZwOPIsCX/NMDWpNau9BcQdM:1dgfqMK6QkxxgiLUEaFbYxkCGOPIsmO9

Score
10/10

Malware Config

Targets

    • Target

      Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Venom RAT + HVNC.exe

    • Size

      15.5MB

    • MD5

      dc7afff0e35d307b937803c0c9ce9950

    • SHA1

      25763c899b1e0f1d7073f287513338c2f52fd560

    • SHA256

      91fd819114314284f960159ca85b160ff39a025c55cf51960bb5262878db97f5

    • SHA512

      68e86c1e7b72c7592e3d6a911cfbc1339f9b638312ef59ae6b81bf733676813c3a6512f5d79c685e324cb0be7ae1ffafd72dd75a45116fb7c3762d78f797698b

    • SSDEEP

      196608:UA5PPrnA5PPr3lAA5PPrJSe6PC7aIahLkNPFCZZwiJl1NLIsPA8fxvuIMzd/95Un:PebljNd60T7P+Zw6NLIsFfskh1BmXG

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks