Analysis
-
max time kernel
135s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
-
submitted
27-03-2023 13:24
General
-
Target
Venom_RAT_COMPILED/Plugins/Keylogger.exe
-
Size
10KB
-
MD5
7ed065eaead4459e1b802715367b57d9
-
SHA1
70bb5500f80c3c71fbaf7adaea527c16bfca316e
-
SHA256
2e6e13e2498910dd511c5eb7a53e29920f8d4bf506df97bd209a27d776ae9068
-
SHA512
750ffd5a77f74b2d3bbbbbd83ec91b67193d8ee82780c2bb8e389ea844f16c82c693a8696687bb0e2ab87a77cd3794155857a0124f15124957b8acbc47bcadaf
-
SSDEEP
192:Ctmcuq65SoDxi4maEYbRzmEsLkjgv5JHTCeJYHcwY7fazDZEi:CtlF60GE9rUhVsLF5pCrYyvZE
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Venom_RAT_COMPILED\Plugins\Keylogger.exe"C:\Users\Admin\AppData\Local\Temp\Venom_RAT_COMPILED\Plugins\Keylogger.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3744-133-0x0000000000F20000-0x0000000000F28000-memory.dmpFilesize
32KB
-
memory/3744-134-0x000000001BC40000-0x000000001BC50000-memory.dmpFilesize
64KB
-
memory/3744-135-0x000000001BC40000-0x000000001BC50000-memory.dmpFilesize
64KB