Overview

overview

10

Static

static

10

VenomRAT v6.0.3.7z

windows11-21h2-x64

3

VenomRAT v...to.dll

windows11-21h2-x64

1

VenomRAT v....1.dll

windows11-21h2-x64

1

VenomRAT v....1.dll

windows11-21h2-x64

1

VenomRAT v....1.dll

windows11-21h2-x64

1

VenomRAT v....1.dll

windows11-21h2-x64

1

VenomRAT v...re.dll

windows11-21h2-x64

1

VenomRAT v...re.dll

windows11-21h2-x64

1

VenomRAT v...ng.dll

windows11-21h2-x64

1

VenomRAT v...re.dll

windows11-21h2-x64

1

VenomRAT v...re.dll

windows11-21h2-x64

1

VenomRAT v...re.dll

windows11-21h2-x64

1

VenomRAT v....1.dll

windows11-21h2-x64

1

VenomRAT v....1.dll

windows11-21h2-x64

1

VenomRAT v....1.dll

windows11-21h2-x64

1

VenomRAT v....1.dll

windows11-21h2-x64

1

VenomRAT v....1.dll

windows11-21h2-x64

1

VenomRAT v....1.dll

windows11-21h2-x64

1

VenomRAT v....1.dll

windows11-21h2-x64

1

VenomRAT v....1.dll

windows11-21h2-x64

1

VenomRAT v...or.dll

windows11-21h2-x64

1

VenomRAT v...ib.dll

windows11-21h2-x64

1

VenomRAT v...es.dll

windows11-21h2-x64

1

VenomRAT v...on.dll

windows11-21h2-x64

1

VenomRAT v...io.dll

windows11-21h2-x64

1

VenomRAT v...rd.dll

windows11-21h2-x64

1

VenomRAT v...ra.dll

windows11-21h2-x64

1

VenomRAT v...xe.xml

windows11-21h2-x64

1

VenomRAT v...ll.xml

windows11-21h2-x64

1

VenomRAT v...ion.db

windows11-21h2-x64

3

VenomRAT v...xe.xml

windows11-21h2-x64

1

VenomRAT v...xe.xml

windows11-21h2-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    VenomRAT v6.0.3.7z
  • Size 40.4MB
  • Sample240407-dfdrfabg67
  • SHA256 800606d07c788db1b90747cf678c61c615d5c527b5d864a486d2b7c1551f4e08
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
asyncratstormkittyrat

Malware Config

Targets

    • Target
      VenomRAT v6.0.3.7z
    • Size 40.4MB
    • SHA256 800606d07c788db1b90747cf678c61c615d5c527b5d864a486d2b7c1551f4e08
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral1
    • Target
      VenomRAT v6.0.3/BouncyCastle.Crypto.dll
    • Size 2.5MB
    • SHA256 333903c7d22a27098e45fc64b77a264aa220605cfbd3e329c200d7e4b42c881c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral2
    • Target
      VenomRAT v6.0.3/DevExpress.Data.Desktop.v22.1.dll
    • Size 838KB
    • SHA256 d13e0c266cb9b98a911bbb87fd94cd9e5125e3bff93bb9b1032271e7507ef2f6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral3
    • Target
      VenomRAT v6.0.3/DevExpress.Data.v22.1.dll
    • Size 5.0MB
    • SHA256 e8d4940767c992e14acb77ba1140d5dac56683afe5096e1b08408b0767466e33
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral4
    • Target
      VenomRAT v6.0.3/DevExpress.Drawing.v22.1.dll
    • Size 291KB
    • SHA256 bc0d40dcdcc9f3e2e7b7071ffb033811bb094cc6a63907c994acd5415b577930
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral5
    • Target
      VenomRAT v6.0.3/DevExpress.Images.v22.1.dll
    • Size 8.4MB
    • SHA256 67a7db033d6047d8345182233f6d314c3ff1547dccaf5b8c04d71e1c8d8faa57
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral6
    • Target
      VenomRAT v6.0.3/DevExpress.Office.v22.1.Core.dll
    • Size 3.7MB
    • SHA256 10c2ef3e11a2a2cdac160d4299cd541d6b1f75613ae7adec7689e71d365f7e21
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral7
    • Target
      VenomRAT v6.0.3/DevExpress.Pdf.v22.1.Core.dll
    • Size 5.1MB
    • SHA256 0704e6abdd582e23b37a7bdfd298b914038e43477f2e0bc271b012185a5e71c4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral8
    • Target
      VenomRAT v6.0.3/DevExpress.Pdf.v22.1.Drawing.dll
    • Size 502KB
    • SHA256 f98ad5274cc55f675c60a61d74a4d213a30c00e466537ee852d75c5f390ce7c3
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral9
    • Target
      VenomRAT v6.0.3/DevExpress.Printing.v22.1.Core.dll
    • Size 4.5MB
    • SHA256 e4d60cac9cacde3cab841854b4c5348df89a4e4027b62de09184a3ddbb81a5a0
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral10
    • Target
      VenomRAT v6.0.3/DevExpress.RichEdit.v22.1.Core.dll
    • Size 8.4MB
    • SHA256 078551cc3b00963dcfae8bcf69f8e926cf67234fc3c688fffccc195b4a611976
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral11
    • Target
      VenomRAT v6.0.3/DevExpress.Sparkline.v22.1.Core.dll
    • Size 87KB
    • SHA256 bf03f577ecb257067abee5e7b6e49803a309231701cd07a39caa210d5c886c4c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral12
    • Target
      VenomRAT v6.0.3/DevExpress.Utils.v22.1.dll
    • Size 20.0MB
    • SHA256 50cba5304bf0a620c119a610e73f545fee688462860706785db507110739a093
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral13
    • Target
      VenomRAT v6.0.3/DevExpress.XtraBars.v22.1.dll
    • Size 6.5MB
    • SHA256 3f31296a5be7c607874f4fd3e66df9d2c460edbc5c4b41ee5ce93534786310ac
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral14
    • Target
      VenomRAT v6.0.3/DevExpress.XtraEditors.v22.1.dll
    • Size 7.7MB
    • SHA256 fc4e229d2237af90eb1b76205b543098ee958cbc7558d7a6dab41b5210fdaef5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral15
    • Target
      VenomRAT v6.0.3/DevExpress.XtraGrid.v22.1.dll
    • Size 3.6MB
    • SHA256 ae22e7bebe5c4b59363c5980940c64608d1a35c6b5026e0e088605132187c8da
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral16
    • Target
      VenomRAT v6.0.3/DevExpress.XtraLayout.v22.1.dll
    • Size 2.0MB
    • SHA256 e6e670bf76dc46e959f74b09d3c6e614b2121975456b00041e32bd7f5001253f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral17
    • Target
      VenomRAT v6.0.3/DevExpress.XtraPrinting.v22.1.dll
    • Size 1.1MB
    • SHA256 a361dae0ce4896e3303f0814c6bf5cbb6779dc40eb438ebc6382c8c6b7b84614
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral18
    • Target
      VenomRAT v6.0.3/DevExpress.XtraRichEdit.v22.1.dll
    • Size 2.9MB
    • SHA256 8a891d4cde599dfb4d21556690dd7233b17d24442ae59e0eb704bbca46f0b68a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral19
    • Target
      VenomRAT v6.0.3/DevExpress.XtraTreeList.v22.1.dll
    • Size 1.6MB
    • SHA256 b611389621a70130b62c0248a822f691984d0724c5897a39f0c82ce9814d11dd
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral20
    • Target
      VenomRAT v6.0.3/IconExtractor.dll
    • Size 10KB
    • SHA256 440912d85d2f98bb4f508ab82847067c18e1e15be0d8ecdcff0cc19327527fc2
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral21
    • Target
      VenomRAT v6.0.3/MessagePackLib.dll
    • Size 16KB
    • SHA256 669e42b6c6e94dc2735f281aa5b33c0d398b91960158ec556e521974b3be5843
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral22
    • Target
      VenomRAT v6.0.3/Microsoft.Win32.Primitives.dll
    • Size 20KB
    • SHA256 5eaa2e82a26b0b302280d08f54dc9da25165dd0e286be52440a271285d63f695
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral23
    • Target
      VenomRAT v6.0.3/Newtonsoft.Json.dll
    • Size 695KB
    • SHA256 c5c83bbc1741be6ff4c490c0aee34c162945423ec577c646538b2d21ce13199e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral24
    • Target
      VenomRAT v6.0.3/Plugins/Audio.dll
    • Size 23KB
    • SHA256 158e664b0976c0ae9594d7f57ff44ba298ca50dcf43fcdb76df5ff1893537800
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral25
    • Target
      VenomRAT v6.0.3/Plugins/Discord.dll
    • Size 25KB
    • SHA256 84c4a1f90507955ce9ff3e8c260bbacdb57b4d230853d2fe1379fdbc98938c7b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral26
    • Target
      VenomRAT v6.0.3/Plugins/Extra.dll
    • Size 31KB
    • SHA256 42b16d214b9336027c3e854c119739fac4cceac6e91045f69d1db18144b538bd
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral27
    • Target
      VenomRAT v6.0.3/Plugins/Keylogger.exe.config
    • Size 161B
    • SHA256 68cbb1295389a1bd6b830debfd0a8bb0a88bee2522304f5894c710912021194c
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral28
    • Target
      VenomRAT v6.0.3/Plugins/Stealer.dll.config
    • Size 1KB
    • SHA256 63837bde3bfb609d59002b88831786e7b0bf285a6090f9252c35af9ee3f75ff6
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral29
    • Target
      VenomRAT v6.0.3/Plugins/ip2region.db
    • Size 8.9MB
    • SHA256 5948907df4a4782d5954499b65ab011e257fc5775f81e0b8b4dea6fa10e6fcc5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral30
    • Target
      VenomRAT v6.0.3/VenomRAT.exe.config
    • Size 3KB
    • SHA256 0aa9e3ab5c88c5761120206eff5c6e35c90288290b3647a942059705ef5b75e5
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral31
    • Target
      VenomRAT v6.0.3/Venomr~1.exe.config
    • Size 19KB
    • SHA256 fe52ba877049f0ecf4bf78d23116d0a7cb6e8f69daa82098ff8594488de0f10f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

ratstormkittyasyncrat
Score
10/10

behavioral1

Score
3/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
3/10

behavioral31

Score
1/10

behavioral32

Score
1/10