Analysis
-
max time kernel
71s -
max time network
193s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
16/05/2024, 22:30
General
-
Target
VenomRAT_v6.0.3/Stub/ClientAny.exe
-
Size
69KB
-
MD5
73d9313ae1fe7087365b1e8c5064da8d
-
SHA1
9d26fc79ca9e9e0521c45f5d76516cce94e59b2c
-
SHA256
efc3192e9c1193f50de52db0d4d578922fdc8e91d2d267cea6f8bf0e84ca49d7
-
SHA512
f8e30df1e3852ae8e5e578bc11103ec5ba6ccf488284f1e735eb529ed0577d3703705a054999a75645daf2f8b5bf75a6d063700b16d012743ec1ad94919898cd
-
SSDEEP
1536:NWURcxPw++Zxz2IkDzj+rBGI+z1bf/5PDKBLVclN:8URcxPQZF2/D+rB+z1bfRPwBY
Score
10/10
Malware Config
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\VenomRAT_v6.0.3\Stub\ClientAny.exe"C:\Users\Admin\AppData\Local\Temp\VenomRAT_v6.0.3\Stub\ClientAny.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
96KB
-
Filesize
9.9MB