General
-
Target
Venom_RAT_5.6_[tombstone3#3883].rar
-
Size
43.5MB
-
Sample
230318-m4a5wsca53
-
MD5
9761b24ac4ed7ab929ad618f6ec5465c
-
SHA1
fef34782a4b186ddac3fe3e021b741be7509908c
-
SHA256
25d3b2e90d875a39da06c8d8c6c24478947af5d193302269f1b08d4b298e7a90
-
SHA512
541ecd24b64e7538ec9275dd482ceb189717bb312b0c339d42f57b21440054ef2c4f396d11c9ff02e34bfed10c29dd264f0a0a2569aecaee5e514d95ed7b92aa
-
SSDEEP
786432:aAlNdg8MqMK6QkxSCMRiBJUEaIvBYJ9P3YEeNrvMCZwOPIsCX/NMDWpNau9BcQdM:1dgfqMK6QkxxgiLUEaFbYxkCGOPIsmO9
Behavioral task
behavioral1
Sample
Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Venom RAT + HVNC.exe
Resource
win10-20230220-en
Malware Config
Targets
-
-
Target
Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Venom RAT + HVNC.exe
-
Size
15.5MB
-
MD5
dc7afff0e35d307b937803c0c9ce9950
-
SHA1
25763c899b1e0f1d7073f287513338c2f52fd560
-
SHA256
91fd819114314284f960159ca85b160ff39a025c55cf51960bb5262878db97f5
-
SHA512
68e86c1e7b72c7592e3d6a911cfbc1339f9b638312ef59ae6b81bf733676813c3a6512f5d79c685e324cb0be7ae1ffafd72dd75a45116fb7c3762d78f797698b
-
SSDEEP
196608:UA5PPrnA5PPr3lAA5PPrJSe6PC7aIahLkNPFCZZwiJl1NLIsPA8fxvuIMzd/95Un:PebljNd60T7P+Zw6NLIsFfskh1BmXG
-
Async RAT payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-