General

  • Target

    VenomRAT_HVNC_2023_Cracked-master.zip

  • Size

    17.3MB

  • Sample

    231211-p9qtmsgfc3

  • MD5

    3472dac603d0639783cf30741fc2cf25

  • SHA1

    9b1181eac310e5da1f58503a753cc5cd7d86230d

  • SHA256

    2bf31beecc716d1fc8ef6137e1585d402031a157dbf9053349e2c65906d59212

  • SHA512

    6833527dc08f0f118c77d7263f90899e5cb8bdfeecf27a42678f39de9f8913559aed108cc7bb89079b91c2f54b3c681bfcb7423a575873f2830849ac3cd502c8

  • SSDEEP

    393216:v+2PTBhjglhhk/iT1nL4iHbAw1U0zsHbA9kFfa+7:bNhjgKiT1n7HDUfHpFj

Malware Config

Extracted

Family

arrowrat

Botnet

%Group%

C2

%Hosts%:%Ports%

Mutex

%MTX%

Targets

    • Target

      VenomRAT_HVNC_2023_Cracked-master/DLLS/7z.exe

    • Size

      436KB

    • MD5

      3e797119e0fd64297cb82794b8d68edd

    • SHA1

      a67d3b35743f6ca383673a3848b8c97ec164cc0d

    • SHA256

      c7245e21a7553d9e52d434002a401c77a7ca7d0f245f2311b0ddf16f8f946c6f

    • SHA512

      1378c54a3a1c5bd73c04e787d218f245024625003d689379013f1343c7f9e6282d670c3d68edce6006629ca90cddd27ac3f53f640f96c4936bbff319658caef8

    • SSDEEP

      12288:4DRHJamC1E+3ZZ4jjEKDywIYCsdtpu7Cdw:ghF+3ZZ4lRk7h

    Score
    1/10
    • Target

      VenomRAT_HVNC_2023_Cracked-master/DLLS/BouncyCastle.Crypto.dll

    • Size

      2.5MB

    • MD5

      3551343fab213740bbb022e3a6dcf27b

    • SHA1

      de67fb4f9d58db4a860a703c8d1f54ff00ff9b1f

    • SHA256

      5530dff976bc0c889076b97ca695bdb97ef07f63449d32f893ed32398ed8bfe6

    • SHA512

      e90f51053e1d4b0ea1f7458229de92174abf0781c766290da4de5cc8dfcfb730998252bf28b36ca5070978fdcea8b97f0aea6a47b875dd34173643ac0cb46c42

    • SSDEEP

      49152:3CTzhVM0AU5d3UOhq8hmReOUJfd5T3D+VTQlgQeCKbu9kQLO0:GwU5d3vhzhmoOmfd5rqX0

    Score
    1/10
    • Target

      VenomRAT_HVNC_2023_Cracked-master/DLLS/Guna.UI2.dll

    • Size

      2.0MB

    • MD5

      0188fce753516183a41c4d146e337778

    • SHA1

      eb0f5324e8dd08a181d4bdfc1d90543077b2ee67

    • SHA256

      ee4449bccf826cbc56c13087d54a1a69fd42464d437ce8f355ac6afb61df6829

    • SHA512

      b3aafc9a80eec37556f4e60ab23579dd7d42c060b3ca2064d6d0c16901b54500503750868bef651a01401551551e372ac9fd459029c5d0efdd2aa385384916fc

    • SSDEEP

      24576:SANEfBpDsH/bTIRPZyiXeq+Tc7XRbF+TSgkrwf9Pa3oZm8jqG4LEx1npSBeX673f:Sz9+OgRpUwXpUeXQq5dn

    Score
    1/10
    • Target

      VenomRAT_HVNC_2023_Cracked-master/DLLS/IconExtractor.dll

    • Size

      10KB

    • MD5

      7bcf61e29e5cbcd1b81d9ab72cbfed93

    • SHA1

      d082613177dd1711c18426d4f83921dd932bc7b1

    • SHA256

      2c359ce857982f45b09af49dbccfb2ae302839acf1956e8325e7f854b339a8c9

    • SHA512

      ce84af38dc63374d304d4e3b6c098892588df5ca5e921505c410b2a24ec0137dbc3120bc713cc0e4bf7836c57b7db224dd3264ea454cbfdb1ef78c9ffb19b6d9

    • SSDEEP

      192:vyB0L3vIFktNlrgyLY5ZJeU5cs7hnvR952:vyeL3/gyLYPJR5RJG

    Score
    1/10
    • Target

      VenomRAT_HVNC_2023_Cracked-master/DLLS/Microsoft.Win32.Primitives.dll

    • Size

      20KB

    • MD5

      76b8d417c2f6416fa81eacc45977cea2

    • SHA1

      7b249c6390dfc90ef33f9a697174e363080091ef

    • SHA256

      5eaa2e82a26b0b302280d08f54dc9da25165dd0e286be52440a271285d63f695

    • SHA512

      3b510cdc45c94be383c91687c2cb01a501ba34e3fbb66346214fc576d6f0e63c77d1d09c6419fc907f5b083387a7046c0670377ad2e00c3ec2e731275739f9c7

    • SSDEEP

      384:/N9VWhX3WsQBm0GftpBjvmaQHRN7YlgaGn7rJd0:1GmViYL0Gff0

    Score
    1/10
    • Target

      VenomRAT_HVNC_2023_Cracked-master/DLLS/Newtonsoft.Json.dll

    • Size

      492KB

    • MD5

      5e02ddaf3b02e43e532fc6a52b04d14b

    • SHA1

      67f0bd5cfa3824860626b6b3fff37dc89e305cec

    • SHA256

      78bedd9fce877a71a8d8ff9a813662d8248361e46705c4ef7afc61d440ff2eeb

    • SHA512

      38720cacbb169dfc448deef86af973eafefa19eaeb48c55c58091c9d6a8b12a1f90148c287faaaa01326ec47143969ad1b54ee2b81018e1de0b83350dc418d1c

    • SSDEEP

      12288:axrplPT3qwNBC3wl1zVh0Yg0pJy/qleTpfZLQ0so/VHjh:a1plPGwNBC3UOwVeLQ0so/VH

    Score
    1/10
    • Target

      VenomRAT_HVNC_2023_Cracked-master/DLLS/Plugins/Audio.dll

    • Size

      25KB

    • MD5

      025864d133e416f144030cf22ea9f2c3

    • SHA1

      6be2cb2454335f0de00799000f65c5cee796c185

    • SHA256

      1323a7212239513270077e07cb436af721acedb0c21c99b06c163a230baaa50a

    • SHA512

      ccda6ef9847f89e53adaa637c7f762be22506b8b6bd2a5538b6622c33f3244f9c491e39e7df7512b5edced3d0395e4541b182f7da6a254b8891b9d64d71538b2

    • SSDEEP

      384:si+z4JdSCmRO5Gw5ZGuC0CWdseXGKfZ0CDzukNpLQ3s6XXLca78nOtX:7zJds45GwRC63lF27AOtX

    Score
    1/10
    • Target

      VenomRAT_HVNC_2023_Cracked-master/DLLS/Plugins/Chat.dll

    • Size

      456KB

    • MD5

      8fc1192cf52f55ed5efb5e12210a37bf

    • SHA1

      dbcf714d0d9b0fe44bdfe2ee150227c2a0e7c387

    • SHA256

      dfa246c2763bf5df442a81128b3587f7bf530e4327f631cdd4dd79106738cf31

    • SHA512

      74603de6069cc6bf02afa5cfc3ba1493240bcb7c74fcbd53219448134b79fb5ebefc1dec61ac4c6a04c56dc6d986887a4a68d87ae1dc07ba6d1d8b8afc9d480c

    • SSDEEP

      6144:CtBlKJ+p4JX0cZsaB6N83r2y/plBWnxfID/uKNlNQ7fOiLXyCrxO9w+KQqxe/tT:CVKTkcZBB6NKbBWnxfIvNr4siQqx4

    Score
    1/10
    • Target

      VenomRAT_HVNC_2023_Cracked-master/DLLS/Plugins/Discord.dll

    • Size

      27KB

    • MD5

      b591cff18fd7344243cf8a4eca624a65

    • SHA1

      29f9134bb33d429d27b87e6f2112b6753e1dcae4

    • SHA256

      6a43095314d5e32db307eef638d2f5afea7dd40ff6acda24fc28ce0c1632cb6a

    • SHA512

      ae1aa8db37182a4b8ee06249da6304c1c105adf06b2091cf24b3e79ad1d6d1a6eaab12bf059cd86deb04b7084d563a25d5bbef6ddf7857c1a34fc0e0032664fc

    • SSDEEP

      384:HfzPwa/ppmIwuCfMeSmfbQFFVBdseXG3cGh+JaL6lkSggL5XxXIUdwmuJpSVmlY2:HhGIwhPgh0Jd+5XxjwmuJpSV/I7

    Score
    1/10
    • Target

      VenomRAT_HVNC_2023_Cracked-master/DLLS/Plugins/Extra.dll

    • Size

      34KB

    • MD5

      17db58471bf45715ba46b5af7920d676

    • SHA1

      0ab236a6d554597dac8fc40fc3e1a29f905c0275

    • SHA256

      dae673b838de497c1aa8a558d4dd5963d90e8b21538cb0d9adce585ef6fbc915

    • SHA512

      29432c0d19be6ae8c8ab68ab1a7c4007d502222b329f9a0bfb994427f182028aeeacc199dd27334cdc0adabbdee7a07a3d24826ed67b05711c2370a4b7395265

    • SSDEEP

      384:0hfLE8JhqmxGhnGOheE6qCtdKudseXG5JN2ahDkz7R3bu6jUwv5YacMvvp8D5K8:wQ8hxGWCkQuMPkv5YdAva9IKqbnMK

    Score
    1/10
    • Target

      VenomRAT_HVNC_2023_Cracked-master/DLLS/Plugins/FileManager.dll

    • Size

      34KB

    • MD5

      dab76ee6ff2548a9bd45c0e582f4d90a

    • SHA1

      70b0e615c1728aa8198dd4be4899fd883bffa1d9

    • SHA256

      50f93055604c7418fa0e5536afd0b4d535db752b5e7edf588cbc14c1570613a1

    • SHA512

      431f38a2b08c5d9f9914a05eca7a32084b3b33d473cedb91904776417c49d8599ec81c905a857a118e8d6b39a200accd14b1c21a35b1faea760084fd75967501

    • SSDEEP

      384:V/fLIMFZcuWQHBVugXvYhXmovTuC/Jn/KddseXG/htVhD8mouoFFAEFuc0oOJPtp:9pBQ2ovTZ/kdczcFhntYtny1l1E

    Score
    1/10
    • Target

      VenomRAT_HVNC_2023_Cracked-master/DLLS/Plugins/FileSearcher.dll

    • Size

      280KB

    • MD5

      a186a27b6e893b60bf236120a6a329a7

    • SHA1

      9186d71d524f2716c7ad3e934e134aa68366006e

    • SHA256

      a91d0552200064646768b1fcd393568ca6144279ef0543aee6a74c4d11c34f49

    • SHA512

      f5acc60bdcf71eea700af6c6372e68d58cac1008a6fc2850dcde1c59310cb84527725740f646be4a146adde6f0878781101670ce922c3566b34262da857aa847

    • SSDEEP

      3072:OUI94v0G+OSJqB7OOaJOqX8s28ccc9k16uLWcSCSLeNYcEeI/KQ73WmbaC4nRZkp:YKWOaG4X5S9k1zbB6YF6X

    Score
    1/10
    • Target

      VenomRAT_HVNC_2023_Cracked-master/DLLS/Plugins/Fun.dll

    • Size

      36KB

    • MD5

      e07004ec43ed994b9a11999145f5a43a

    • SHA1

      00cba09ae5a38dcfdbac1a8cff9cd1fff2c0b3e7

    • SHA256

      2b25c33a033bdc85ea4db8c3ea89bbfc7d1a1dd80d21a1835bba5672759efdd9

    • SHA512

      39948577cf0185ffbda3c2757c7fa746e41a169ca7fa0a3718cc564fbbec439b047bc540fbd5ac59908965424ef11f6564d9795b101bfc58656247e76b0c88f5

    • SSDEEP

      384:T7fLviWK1Xr4GtVmEc6BktslnlrqKQdseXGtrR52bhimwy0Xprnhc4r/f7rpVqKX:fGXFEGtMqS2lnhQk95Z3nhXrLDUCE+

    Score
    1/10
    • Target

      VenomRAT_HVNC_2023_Cracked-master/DLLS/Plugins/Information.dll

    • Size

      27KB

    • MD5

      a7670d3509baa51af6566b93b185b854

    • SHA1

      2b322b936eea3dd5414efe589acab3cb49dfe9b2

    • SHA256

      9fbfd1036e579edc9498625e86c45743e4ad8ecf5960f4a87a9402ba1236448f

    • SHA512

      34999ca9b71de6ed4a3cc99177ee472bf90af9282a095d2cf6b05f17e896f518b46382aee021b540f5422c0997680023206b1281013c468a72116cb646a89882

    • SSDEEP

      384:BRfL6mS8ayvHxy63m+tDZdseXGEXNhDYLuA7InXxtXciyxVM6d0PALKz9G+mZ9:nBS8x72+1ZTaIn3siOvePALKs+m3

    Score
    1/10
    • Target

      VenomRAT_HVNC_2023_Cracked-master/DLLS/Plugins/Keylogger.exe

    • Size

      10KB

    • MD5

      4f846f2117c4eab285289b0090521b1e

    • SHA1

      e25287c39bad32159417c5f0bf798625b6beff45

    • SHA256

      a17a5bf35d8b784c3111632ba7e0c30a2c1a9c2c95b549235affc16d6d055477

    • SHA512

      fd946b5f7c3c7d32f226897283de7ba3b4a4ecc2919c363877f1258cd24ed1a52bce53af2fe4ef34c4ac30d00fc456fd4e1593b79c37f7c22211f2c4f6092e5e

    • SSDEEP

      192:irtmcuq65SoDxi4maEYbRzmEsLkjgv5JHT1eJYHcwY7fazB+LEi:irtlF60GE9rUhVsLF5p1rYydmE

    Score
    1/10
    • Target

      VenomRAT_HVNC_2023_Cracked-master/DLLS/Plugins/Logger.dll

    • Size

      28KB

    • MD5

      3717491f7b1a90aaa5f271ab14147a9b

    • SHA1

      bced873bf58c79d2787d8ea501e7888b260d36f6

    • SHA256

      f744c46e4c678d65d9682a0f42dc2b82277ea2d879eeb3d708fb70af2af40a94

    • SHA512

      c45dae23e4fe7524aba823a834b6882572d4de10034291b81236fe6a44457e4d8fbc935b1d673b6b83260925f76ba1a0ae156eca4626b795f10b1a1e4f327a31

    • SSDEEP

      384:KyQLebQc3aImZ5mzk2yKajPdseXGLN0phDbuAyso4bNmLaNDNCsQKbQr1jIC8:/i/bbUyPMeBbI1AQ50C8

    Score
    1/10

MITRE ATT&CK Matrix

Tasks

static1

agilenetrat%group%asyncratarrowrat
Score
10/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10