Overview
overview
10Static
static
10Venom5-HVNC-Rat.zip
windows10-2004-x64
1System.Xml.XPath.dll
windows10-2004-x64
1System.Xml...nt.dll
windows10-2004-x64
1System.Xml...er.dll
windows10-2004-x64
1VenomRAT_HVNC.exe
windows10-2004-x64
10VenomRAT_HVNC.exe.xml
windows10-2004-x64
1VenomRAT_HVNC.pdb
windows10-2004-x64
3Vestris.Re...ib.dll
windows10-2004-x64
1Vestris.Re...ib.xml
windows10-2004-x64
1bhatrussia.url
windows10-2004-x64
3blackhatrussia.url
windows10-2004-x64
3cGeoIp.dll
windows10-2004-x64
1client.exe
windows10-2004-x64
10dnlib.dll
windows10-2004-x64
1gbpast - Login.url
windows10-2004-x64
1learn all ...ng.url
windows10-2004-x64
1netstandard.dll
windows10-2004-x64
1packages/V...re.p7s
windows10-2004-x64
7packages/V....nupkg
windows10-2004-x64
3packages/V...ib.dll
windows10-2004-x64
1packages/V...ib.xml
windows10-2004-x64
1packages/V...ib.dll
windows10-2004-x64
1packages/V...ib.xml
windows10-2004-x64
1packages/V...ib.dll
windows10-2004-x64
1packages/V...ib.xml
windows10-2004-x64
1packages/V...ib.dll
windows10-2004-x64
1packages/V...ib.xml
windows10-2004-x64
1packages/V...ib.dll
windows10-2004-x64
1packages/V...ib.xml
windows10-2004-x64
1protobuf-net.dll
windows10-2004-x64
1readme.txt
windows10-2004-x64
1svchost.exe
windows10-2004-x64
7Analysis
-
max time kernel
142s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
06-11-2023 18:41
Behavioral task
behavioral1
Sample
Venom5-HVNC-Rat.zip
Resource
win10v2004-20231023-en
Behavioral task
behavioral2
Sample
System.Xml.XPath.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral3
Sample
System.Xml.XmlDocument.dll
Resource
win10v2004-20231025-en
Behavioral task
behavioral4
Sample
System.Xml.XmlSerializer.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral5
Sample
VenomRAT_HVNC.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral6
Sample
VenomRAT_HVNC.exe.xml
Resource
win10v2004-20231023-en
Behavioral task
behavioral7
Sample
VenomRAT_HVNC.pdb
Resource
win10v2004-20231020-en
Behavioral task
behavioral8
Sample
Vestris.ResourceLib.dll
Resource
win10v2004-20231025-en
Behavioral task
behavioral9
Sample
Vestris.ResourceLib.xml
Resource
win10v2004-20231020-en
Behavioral task
behavioral10
Sample
bhatrussia.url
Resource
win10v2004-20231020-en
Behavioral task
behavioral11
Sample
blackhatrussia.url
Resource
win10v2004-20231023-en
Behavioral task
behavioral12
Sample
cGeoIp.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral13
Sample
client.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral14
Sample
dnlib.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral15
Sample
gbpast - Login.url
Resource
win10v2004-20231023-en
Behavioral task
behavioral16
Sample
learn all kind of hacking.url
Resource
win10v2004-20231020-en
Behavioral task
behavioral17
Sample
netstandard.dll
Resource
win10v2004-20231025-en
Behavioral task
behavioral18
Sample
packages/Vestris.ResourceLib.2.2.0-beta0004/.signature.p7s
Resource
win10v2004-20231023-en
Behavioral task
behavioral19
Sample
packages/Vestris.ResourceLib.2.2.0-beta0004/Vestris.ResourceLib.2.2.0-beta0004.nupkg
Resource
win10v2004-20231023-en
Behavioral task
behavioral20
Sample
packages/Vestris.ResourceLib.2.2.0-beta0004/lib/net20/Vestris.ResourceLib.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral21
Sample
packages/Vestris.ResourceLib.2.2.0-beta0004/lib/net20/Vestris.ResourceLib.xml
Resource
win10v2004-20231020-en
Behavioral task
behavioral22
Sample
packages/Vestris.ResourceLib.2.2.0-beta0004/lib/net35/Vestris.ResourceLib.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral23
Sample
packages/Vestris.ResourceLib.2.2.0-beta0004/lib/net35/Vestris.ResourceLib.xml
Resource
win10v2004-20231020-en
Behavioral task
behavioral24
Sample
packages/Vestris.ResourceLib.2.2.0-beta0004/lib/net40/Vestris.ResourceLib.dll
Resource
win10v2004-20231025-en
Behavioral task
behavioral25
Sample
packages/Vestris.ResourceLib.2.2.0-beta0004/lib/net40/Vestris.ResourceLib.xml
Resource
win10v2004-20231023-en
Behavioral task
behavioral26
Sample
packages/Vestris.ResourceLib.2.2.0-beta0004/lib/net45/Vestris.ResourceLib.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral27
Sample
packages/Vestris.ResourceLib.2.2.0-beta0004/lib/net45/Vestris.ResourceLib.xml
Resource
win10v2004-20231020-en
Behavioral task
behavioral28
Sample
packages/Vestris.ResourceLib.2.2.0-beta0004/lib/netstandard2.0/Vestris.ResourceLib.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral29
Sample
packages/Vestris.ResourceLib.2.2.0-beta0004/lib/netstandard2.0/Vestris.ResourceLib.xml
Resource
win10v2004-20231023-en
Behavioral task
behavioral30
Sample
protobuf-net.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral31
Sample
readme.txt
Resource
win10v2004-20231023-en
Behavioral task
behavioral32
Sample
svchost.exe
Resource
win10v2004-20231023-en
General
-
Target
packages/Vestris.ResourceLib.2.2.0-beta0004/lib/net35/Vestris.ResourceLib.xml
-
Size
286KB
-
MD5
5d2dee455b4003b6624b6dd890edb279
-
SHA1
4cdb025c8c5935bfc49871fca80fc4a346acd579
-
SHA256
02b4fd6d46ffc9411e4688a5b088fbc7d34062024e1c93637535e093319c35b6
-
SHA512
90f0123b6300a2fe53b7da8b50253c5807950da96dd0010e2494cc9f14d339d7a131c9653f29a585c2647634537cfbc1a1d84debc33a1b96bf7f01b88eaedee9
-
SSDEEP
3072:WmVFB8VeEQjvEaXn4chJO2GlUWRLRWIzR:W/VeEQjcaXgdWIzR
Malware Config
Signatures
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\packages\Vestris.ResourceLib.2.2.0-beta0004\lib\net35\Vestris.ResourceLib.xml"1⤵PID:4348