c5a3adfb752d687ff014bc915aa27b305230dfd18b25314e9cf5077abea0d8f2

Submit
Reports

Overview

overview

Static

static

Venom_RAT_...to.dll

windows10-2004-x64

Venom_RAT_...I2.dll

windows10-2004-x64

Venom_RAT_...rd.dll

windows10-2004-x64

Venom_RAT_...ra.dll

windows10-2004-x64

Venom_RAT_...er.dll

windows10-2004-x64

Venom_RAT_...un.dll

windows10-2004-x64

Venom_RAT_...on.dll

windows10-2004-x64

Venom_RAT_...er.exe

windows10-2004-x64

Venom_RAT_...er.dll

windows10-2004-x64

Venom_RAT_...ib.dll

windows10-2004-x64

Venom_RAT_...us.dll

windows10-2004-x64

Venom_RAT_...at.dll

windows10-2004-x64

Venom_RAT_...ns.dll

windows10-2004-x64

Venom_RAT_...nt.exe

windows10-2004-x64

Venom_RAT_...em.dll

windows10-2004-x64

Venom_RAT_...NC.exe

windows10-2004-x64

Venom_RAT_...Ip.dll

windows10-2004-x64

Venom_RAT_...ib.dll

windows10-2004-x64

Venom_RAT_...ib.dll

windows10-2004-x64

Venom_RAT_...et.dll

windows10-2004-x64

Venom_RAT_...ate.js

windows10-2004-x64

Venom_RAT_...er.vbs

windows10-2004-x64

Venom_RAT_...URL.js

windows10-2004-x64

Venom_RAT_...VNC.js

windows10-2004-x64

Venom_RAT_...der.js

windows10-2004-x64

Venom_RAT_...oxy.js

windows10-2004-x64

Venom_RAT_...56.ps1

windows10-2004-x64

Venom_RAT_...nts.js

windows10-2004-x64

Venom_RAT_...ner.js

windows10-2004-x64

Venom_RAT_...ain.js

windows10-2004-x64

Venom_RAT_...der.js

windows10-2004-x64

Venom_RAT_...ate.js

windows10-2004-x64

Analysis

max time kernel
112s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
26-03-2023 23:39

Sharing

Copy URL

Twitter E-mail

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

Venom_RAT_COMPILED/BouncyCastle.Crypto.dll

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Venom_RAT_COMPILED/Guna.UI2.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Venom_RAT_COMPILED/Plugins/Discord.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Venom_RAT_COMPILED/Plugins/Extra.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Venom_RAT_COMPILED/Plugins/FileSearcher.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Venom_RAT_COMPILED/Plugins/Fun.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Venom_RAT_COMPILED/Plugins/Information.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Venom_RAT_COMPILED/Plugins/Keylogger.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

Venom_RAT_COMPILED/Plugins/Logger.dll

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Venom_RAT_COMPILED/Plugins/MessagePackLib.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Venom_RAT_COMPILED/Plugins/Miscellaneous.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Venom_RAT_COMPILED/Plugins/Netstat.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Venom_RAT_COMPILED/Plugins/Options.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Venom_RAT_COMPILED/Stub/Client.exe

Resource

win10v2004-20230220-en

asyncrat rat

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

Venom_RAT_COMPILED/System.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Venom_RAT_COMPILED/Venom RAT + HVNC.exe

Resource

win10v2004-20230220-en

asyncrat rat

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral17

Sample

Venom_RAT_COMPILED/cGeoIp.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Venom_RAT_COMPILED/dnlib.dll

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Venom_RAT_COMPILED/mscorlib.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Venom_RAT_COMPILED/protobuf-net.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/FrmMassUpdate.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/FrmTransfer.vbs

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/FrmURL.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/FrmVNC.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/WebBuilder/WebBuilder.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Quasar/Server/Forms/FrmReverseProxy.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Algorithm/Aes256.ps1

Resource

win10v2004-20230220-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Connection/Clients.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Connection/Listener.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/FormMain.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormBuilder.js

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormCertificate.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Venom_RAT_COMPILED/mscorlib.dll
Size

22.0MB
MD5

94e5a7efb85dcace1cb62132e0e973c6
SHA1

929a1f63d23e765eceb0650c974ef1995ed03225
SHA256

70a18d0210384320e6e907f321a829a35ecce4f3dd5db15da64e1dbf55b99353
SHA512

c7cb7765e0aea7ec0c9a7bd3763c23568c9d7e127aa132169f1c0870e0940b0df23919cac138c28f380f512686bc6d0ea4e4774d5013ba1dc391b24c7697c2fd
SSDEEP

196608:SwFrToXUoo/npmhOgOKu23P6JxENZovaMTIwfPHtZJMSxhAM:SqToXUoCpnBo6JxENBMTIEPHuS8M

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Venom_RAT_COMPILED\mscorlib.dll,#1
1⤵
PID:2008

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads