Analysis
-
max time kernel
189s -
max time network
301s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
16-05-2024 22:30
General
-
Target
VenomRAT_v6.0.3/Stub/Clientx64.exe
-
Size
69KB
-
MD5
50fe12d9ea040a8820dee9e9d6e44e72
-
SHA1
2d6d0fd1614ee8ad801289e5d6b81e6758ef0d74
-
SHA256
23905e48fa50d3228cb79fc475da9d6a05be7b98eef3fd61703dacda9b591392
-
SHA512
49263c1cb17c35e4e0e8845ac7903d12c450dbf0236e333a00dcb2aebee963beaf283ce904b2ca71031b1dcbdab8fa201926306ec2e1760f19373366d054aa46
-
SSDEEP
1536:5WURcxPw++Zx3xa2u4AEHgIdNz1b//hPDK73VclN:wURcxPQZJUEH5z1b/JP2lY
Score
10/10
Malware Config
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\VenomRAT_v6.0.3\Stub\Clientx64.exe"C:\Users\Admin\AppData\Local\Temp\VenomRAT_v6.0.3\Stub\Clientx64.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
88KB
-
Filesize
9.9MB