Overview

overview

10

Static

static

10

BouncyCast...to.dll

windows10-2004-x64

1

Guna.UI2.dll

windows10-2004-x64

1

IconExtractor.dll

windows10-2004-x64

1

Microsoft....es.dll

windows10-2004-x64

1

Newtonsoft.Json.dll

windows10-2004-x64

1

System.AppContext.dll

windows10-2004-x64

1

System.Col...nt.dll

windows10-2004-x64

1

System.Col...ic.dll

windows10-2004-x64

1

System.Col...ed.dll

windows10-2004-x64

1

System.Col...ns.dll

windows10-2004-x64

1

System.Com...nc.dll

windows10-2004-x64

1

System.Com...es.dll

windows10-2004-x64

1

System.Com...er.dll

windows10-2004-x64

1

System.Com...el.dll

windows10-2004-x64

1

System.Console.dll

windows10-2004-x64

1

System.Dat...on.dll

windows10-2004-x64

1

System.Dia...ts.dll

windows10-2004-x64

1

System.Dia...ce.dll

windows10-2004-x64

1

System.Dia...er.dll

windows10-2004-x64

1

System.Dia...ls.dll

windows10-2004-x64

1

System.Dia...ce.dll

windows10-2004-x64

1

System.Dia...ng.dll

windows10-2004-x64

1

System.Dra...es.dll

windows10-2004-x64

1

System.Dyn...me.dll

windows10-2004-x64

1

System.Glo...rs.dll

windows10-2004-x64

1

System.Glo...ns.dll

windows10-2004-x64

1

System.Glo...on.dll

windows10-2004-x64

1

System.IO....le.dll

windows10-2004-x64

1

System.IO....on.dll

windows10-2004-x64

1

System.Sec...ms.dll

windows10-2004-x64

1

System.Threading.dll

windows10-2004-x64

1

VenomRAT_HVNC.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    31s
  • max time network
    35s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-03-2023 21:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    VenomRAT_HVNC.exe

  • Size

    16.5MB

  • MD5

    31be8acd11aa5738dd970410adb597da

  • SHA1

    cd4d52b884066e1a47fd27b616cfafeb66225cde

  • SHA256

    e78a5ee885dc3b170a5e009aaf1a2db565ac1bf729a0c2195ebfe56420717abb

  • SHA512

    ee621bf362cd717d9b026f14e5ff1da5f28fbdb5c58dacd3a8da120e5472baaaef22b052a08d51d49b6dae30cf15178b588acd5cb3596c2e0f2ef533e467ba94

  • SSDEEP

    393216:Hl9Yl7Elel7ElAlQleTl/l/l/l/l/lzlml/lqlZlHl/l/l/l/l/l/lIlAl+lUl2+:JTXT

Score
10/10
asyncratagilenetrat

Malware Config

Signatures

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat
  • Async RAT payload 1 IoCs
    rat
  • Loads dropped DLL 1 IoCs
  • Obfuscated with Agile.Net obfuscator 1 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

    agilenet

Processes

  • C:\Users\Admin\AppData\Local\Temp\VenomRAT_HVNC.exe
    "C:\Users\Admin\AppData\Local\Temp\VenomRAT_HVNC.exe"
    1⤵
    • Loads dropped DLL
    PID:3716

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\a41ef880-d88e-4a33-9618-41469a92ce4d\AgileDotNetRT64.dll
    Filesize

    75KB

    MD5

    42b2c266e49a3acd346b91e3b0e638c0

    SHA1

    2bc52134f03fcc51cb4e0f6c7cf70646b4df7dd1

    SHA256

    adeed015f06efa363d504a18acb671b1db4b20b23664a55c9bc28aef3283ca29

    SHA512

    770822fd681a1d98afe03f6fbe5f116321b54c8e2989fb07491811fd29fca5b666f1adf4c6900823af1271e342cacc9293e9db307c4eef852d1a253b00347a81

    Download Submit
  • C:\Users\Admin\AppData\Local\Temp\a41ef880-d88e-4a33-9618-41469a92ce4d\AgileDotNetRT64.dll
    Filesize

    75KB

    MD5

    42b2c266e49a3acd346b91e3b0e638c0

    SHA1

    2bc52134f03fcc51cb4e0f6c7cf70646b4df7dd1

    SHA256

    adeed015f06efa363d504a18acb671b1db4b20b23664a55c9bc28aef3283ca29

    SHA512

    770822fd681a1d98afe03f6fbe5f116321b54c8e2989fb07491811fd29fca5b666f1adf4c6900823af1271e342cacc9293e9db307c4eef852d1a253b00347a81

    Download Submit
  • memory/3716-143-0x0000025C1A060000-0x0000025C1A070000-memory.dmp
    Filesize

    64KB

    Download
  • memory/3716-141-0x0000025C1A060000-0x0000025C1A070000-memory.dmp
    Filesize

    64KB

    Download
  • memory/3716-134-0x0000025C35010000-0x0000025C35220000-memory.dmp
    Filesize

    2.1MB

    Download
  • memory/3716-142-0x00007FFCC89C0000-0x00007FFCC8B0E000-memory.dmp
    Filesize

    1.3MB

    Download
  • memory/3716-133-0x0000025C18BD0000-0x0000025C19C60000-memory.dmp
    Filesize

    16.6MB

    Download
  • memory/3716-144-0x0000025C1A060000-0x0000025C1A070000-memory.dmp
    Filesize

    64KB

    Download
  • memory/3716-145-0x0000025C1A060000-0x0000025C1A070000-memory.dmp
    Filesize

    64KB

    Download
  • memory/3716-146-0x0000025C1A060000-0x0000025C1A070000-memory.dmp
    Filesize

    64KB

    Download
  • memory/3716-147-0x0000025C1A060000-0x0000025C1A070000-memory.dmp
    Filesize

    64KB

    Download
  • memory/3716-148-0x0000025C1A060000-0x0000025C1A070000-memory.dmp
    Filesize

    64KB

    Download
  • memory/3716-149-0x0000025C1A060000-0x0000025C1A070000-memory.dmp
    Filesize

    64KB

    Download