Analysis
-
max time kernel
1685s -
max time network
1171s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
24-07-2023 15:13
General
-
Target
Venom5-HVNC-Rat/VenomRAT_HVNC/Quasar/Server/Forms/ReverseProxyHandler.cs
-
Size
286B
-
MD5
9ee9484a49d373b5c979243b73b3a6d4
-
SHA1
f443d0aff04a7684e654f63d8af90adeccf9349c
-
SHA256
b285749850d331299a33b06068106299746f00831fa9666920df71ee229c6c2d
-
SHA512
0ece00d13ed69131f4eed497dc4669c1fc8adf7f4577137071a0b480cbef0ae8dd6fd779019a306696f5369c2bea9427e0961191447b0a322a4239f0a711385a
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Venom5-HVNC-Rat\VenomRAT_HVNC\Quasar\Server\Forms\ReverseProxyHandler.cs1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx