Overview

overview

10

Static

static

10

Venom_RAT_...to.dll

windows10-2004-x64

1

Venom_RAT_...I2.dll

windows10-2004-x64

1

Venom_RAT_...rd.dll

windows10-2004-x64

1

Venom_RAT_...ra.dll

windows10-2004-x64

1

Venom_RAT_...er.dll

windows10-2004-x64

1

Venom_RAT_...un.dll

windows10-2004-x64

1

Venom_RAT_...on.dll

windows10-2004-x64

1

Venom_RAT_...er.exe

windows10-2004-x64

1

Venom_RAT_...er.dll

windows10-2004-x64

1

Venom_RAT_...ib.dll

windows10-2004-x64

1

Venom_RAT_...us.dll

windows10-2004-x64

1

Venom_RAT_...at.dll

windows10-2004-x64

1

Venom_RAT_...ns.dll

windows10-2004-x64

1

Venom_RAT_...nt.exe

windows10-2004-x64

10

Venom_RAT_...em.dll

windows10-2004-x64

1

Venom_RAT_...NC.exe

windows10-2004-x64

10

Venom_RAT_...Ip.dll

windows10-2004-x64

1

Venom_RAT_...ib.dll

windows10-2004-x64

1

Venom_RAT_...ib.dll

windows10-2004-x64

1

Venom_RAT_...et.dll

windows10-2004-x64

1

Venom_RAT_...ate.js

windows10-2004-x64

1

Venom_RAT_...er.vbs

windows10-2004-x64

1

Venom_RAT_...URL.js

windows10-2004-x64

1

Venom_RAT_...VNC.js

windows10-2004-x64

1

Venom_RAT_...der.js

windows10-2004-x64

1

Venom_RAT_...oxy.js

windows10-2004-x64

1

Venom_RAT_...56.ps1

windows10-2004-x64

1

Venom_RAT_...nts.js

windows10-2004-x64

1

Venom_RAT_...ner.js

windows10-2004-x64

1

Venom_RAT_...ain.js

windows10-2004-x64

1

Venom_RAT_...der.js

windows10-2004-x64

1

Venom_RAT_...ate.js

windows10-2004-x64

1

Analysis

  • max time kernel
    83s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-03-2023 23:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Venom_RAT_COMPILED/Stub/Client.exe

  • Size

    60KB

  • MD5

    324ef4e2187cb8fb01f9ce7b7803c79c

  • SHA1

    f87c6d87f08fcc78a3a8312bc767f81c397be810

  • SHA256

    a59354e798768e068f79816146d9f7b41e0003c50d5d8c82602fc16a16962999

  • SHA512

    a621a85453ccf5426ec0732b26d238c26cf29466d5f0138bfd725fe922437401223df2b50b18ae96be73b15ba39bce9e61cdfac87a81a97d9e88cd23a845430d

  • SSDEEP

    1536:AcSD4758ocxx8OKNhYEMWyhoTTI+xkrypqKmY7:AcSD475jcxx8OWiovI+xkrRz

Score
10/10
asyncratrat

Malware Config

Signatures

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat
  • Async RAT payload 1 IoCs
    rat
  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Venom_RAT_COMPILED\Stub\Client.exe
    "C:\Users\Admin\AppData\Local\Temp\Venom_RAT_COMPILED\Stub\Client.exe"
    1⤵
      PID:1372
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 1372 -s 732
        2⤵
        • Program crash
        PID:1944
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 460 -p 1372 -ip 1372
      1⤵
        PID:3824

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1372-133-0x00000000005F0000-0x0000000000604000-memory.dmp
        Filesize

        80KB

        Download