Analysis

  • max time kernel
    142s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-11-2023 18:41

General

  • Target

    VenomRAT_HVNC.exe.xml

  • Size

    2KB

  • MD5

    fa21c166232c3b29f8d2d14557490c9c

  • SHA1

    2cb1a7d4a204fc03bd6bd15aa9f431f3445a08de

  • SHA256

    5c939c46f9d81cb75180c897feb5044176ed44cd0d51e076149bd82425e4ef44

  • SHA512

    cca1dd276a093b62845e5a7652e778d07200b7158cb05a2b44e11e69ce8bc78020eeeb29d55a87a6b87a3fcc25b2883175850467002388a811abfe9945d58fd9

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\VenomRAT_HVNC.exe.xml"
    1⤵
      PID:3860

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3860-0-0x00007FFB51A50000-0x00007FFB51A60000-memory.dmp

      Filesize

      64KB

    • memory/3860-1-0x00007FFB919D0000-0x00007FFB91BC5000-memory.dmp

      Filesize

      2.0MB

    • memory/3860-2-0x00007FFB919D0000-0x00007FFB91BC5000-memory.dmp

      Filesize

      2.0MB

    • memory/3860-3-0x00007FFB919D0000-0x00007FFB91BC5000-memory.dmp

      Filesize

      2.0MB

    • memory/3860-4-0x00007FFB8F230000-0x00007FFB8F4F9000-memory.dmp

      Filesize

      2.8MB

    • memory/3860-5-0x00007FFB51A50000-0x00007FFB51A60000-memory.dmp

      Filesize

      64KB

    • memory/3860-6-0x00007FFB919D0000-0x00007FFB91BC5000-memory.dmp

      Filesize

      2.0MB