c5a3adfb752d687ff014bc915aa27b305230dfd18b25314e9cf5077abea0d8f2

Submit
Reports

Overview

overview

Static

static

Venom_RAT_...to.dll

windows10-2004-x64

Venom_RAT_...I2.dll

windows10-2004-x64

Venom_RAT_...rd.dll

windows10-2004-x64

Venom_RAT_...ra.dll

windows10-2004-x64

Venom_RAT_...er.dll

windows10-2004-x64

Venom_RAT_...un.dll

windows10-2004-x64

Venom_RAT_...on.dll

windows10-2004-x64

Venom_RAT_...er.exe

windows10-2004-x64

Venom_RAT_...er.dll

windows10-2004-x64

Venom_RAT_...ib.dll

windows10-2004-x64

Venom_RAT_...us.dll

windows10-2004-x64

Venom_RAT_...at.dll

windows10-2004-x64

Venom_RAT_...ns.dll

windows10-2004-x64

Venom_RAT_...nt.exe

windows10-2004-x64

Venom_RAT_...em.dll

windows10-2004-x64

Venom_RAT_...NC.exe

windows10-2004-x64

Venom_RAT_...Ip.dll

windows10-2004-x64

Venom_RAT_...ib.dll

windows10-2004-x64

Venom_RAT_...ib.dll

windows10-2004-x64

Venom_RAT_...et.dll

windows10-2004-x64

Venom_RAT_...ate.js

windows10-2004-x64

Venom_RAT_...er.vbs

windows10-2004-x64

Venom_RAT_...URL.js

windows10-2004-x64

Venom_RAT_...VNC.js

windows10-2004-x64

Venom_RAT_...der.js

windows10-2004-x64

Venom_RAT_...oxy.js

windows10-2004-x64

Venom_RAT_...56.ps1

windows10-2004-x64

Venom_RAT_...nts.js

windows10-2004-x64

Venom_RAT_...ner.js

windows10-2004-x64

Venom_RAT_...ain.js

windows10-2004-x64

Venom_RAT_...der.js

windows10-2004-x64

Venom_RAT_...ate.js

windows10-2004-x64

Analysis

max time kernel
117s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
26-03-2023 23:39

Sharing

Copy URL

Twitter E-mail

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

Venom_RAT_COMPILED/BouncyCastle.Crypto.dll

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Venom_RAT_COMPILED/Guna.UI2.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Venom_RAT_COMPILED/Plugins/Discord.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Venom_RAT_COMPILED/Plugins/Extra.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Venom_RAT_COMPILED/Plugins/FileSearcher.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Venom_RAT_COMPILED/Plugins/Fun.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Venom_RAT_COMPILED/Plugins/Information.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Venom_RAT_COMPILED/Plugins/Keylogger.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

Venom_RAT_COMPILED/Plugins/Logger.dll

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Venom_RAT_COMPILED/Plugins/MessagePackLib.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Venom_RAT_COMPILED/Plugins/Miscellaneous.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Venom_RAT_COMPILED/Plugins/Netstat.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Venom_RAT_COMPILED/Plugins/Options.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Venom_RAT_COMPILED/Stub/Client.exe

Resource

win10v2004-20230220-en

asyncrat rat

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

Venom_RAT_COMPILED/System.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Venom_RAT_COMPILED/Venom RAT + HVNC.exe

Resource

win10v2004-20230220-en

asyncrat rat

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral17

Sample

Venom_RAT_COMPILED/cGeoIp.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Venom_RAT_COMPILED/dnlib.dll

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Venom_RAT_COMPILED/mscorlib.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Venom_RAT_COMPILED/protobuf-net.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/FrmMassUpdate.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/FrmTransfer.vbs

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/FrmURL.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/FrmVNC.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/WebBuilder/WebBuilder.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Quasar/Server/Forms/FrmReverseProxy.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Algorithm/Aes256.ps1

Resource

win10v2004-20230220-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Connection/Clients.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Connection/Listener.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/FormMain.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormBuilder.js

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormCertificate.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Venom_RAT_COMPILED/dnlib.dll
Size

1.1MB
MD5

de0069c4097c987bd30ebe8155a8af35
SHA1

aced007f4d852d7b84c689a92d9c36e24381d375
SHA256

83445595d38a8e33513b33dfc201983af4746e5327c9bed470a6282d91d539b6
SHA512

66c45818e5c555e5250f8250ea704bc4ca32ddb4d5824c852ae5dc0f264b009af73c7c1e0db1b74c14ee6b612608d939386da23b56520cac415cd5a8f60a5502
SSDEEP

24576:m+pL+hwfQvqx+yLjynb1YNzh/CNX7fegPeH3hid3Hc9ZEu5DkU6FPepU1VWv7fo0:sxvCLUJ

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Venom_RAT_COMPILED\dnlib.dll,#1
1⤵
PID:4924

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads