General

  • Target

    VENOM-RAT.zip

  • Size

    111.6MB

  • MD5

    a044844da242242d5029d0922292cae5

  • SHA1

    9f77cb70bf808637b3ecf416c7173873b3f63291

  • SHA256

    bff85f049a7cddb710a045ed409bf8ab526c4f86b379adf2e6fc32207cdf87e3

  • SHA512

    96050ba7ab4b11197fc42f5b244cd891730e7be0849a2af56bc9228e38320f87c47876fd9d10d9f487dba91b1a74b505dff0ec1793bd38887acfcb4f9d908e80

  • SSDEEP

    3145728:0U3jA7hTO9bGqInYijF4o5bKToW97vMzkmeRMqhP:FTRGTBF4mKToG7amP

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

Default

C2

95.216.52.21:7575

Mutex

xdnqiaxygefjfoolgo

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 4 IoCs
  • Asyncrat family
  • StormKitty payload 1 IoCs
  • Stormkitty family
  • Unsigned PE 54 IoCs

    Checks for missing Authenticode signature.

Files

  • VENOM-RAT.zip
    .zip
  • BouncyCastle.Crypto.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • DevExpress.Charts.v22.2.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.CodeParser.v22.2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.Data.Desktop.v22.1.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • DevExpress.Data.Desktop.v22.2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.Data.v22.1.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • DevExpress.Data.v22.2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.DataAccess.v22.2.UI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.DataAccess.v22.2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.DataVisualization.v22.2.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.Diagram.v22.2.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.Dialogs.v22.2.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.Drawing.v22.1.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • DevExpress.Drawing.v22.2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.Images.v22.1.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.Images.v22.2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.Mvvm.v22.2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.Office.v22.1.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.Office.v22.2.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.Pdf.v22.1.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.Pdf.v22.1.Drawing.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.Pdf.v22.2.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.Pdf.v22.2.Drawing.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.PivotGrid.v22.2.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.Printing.v22.1.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • DevExpress.Printing.v22.2.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.RichEdit.v22.1.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.RichEdit.v22.2.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.RichEdit.v22.2.Export.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.Sparkline.v22.1.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.Sparkline.v22.2.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.Utils.v22.1.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • DevExpress.Utils.v22.2.UI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.Utils.v22.2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.WinRTPresenter.Launcher.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • DevExpress.Xpo.v22.2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.XtraBars.v22.1.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • DevExpress.XtraBars.v22.2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.XtraCharts.v22.2.Extensions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.XtraCharts.v22.2.UI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.XtraCharts.v22.2.Wizard.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.XtraCharts.v22.2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.XtraDiagram.v22.2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.XtraDialogs.v22.2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.XtraEditors.v22.1.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • DevExpress.XtraEditors.v22.2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.XtraGrid.v22.1.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • DevExpress.XtraGrid.v22.2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.XtraLayout.v22.1.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • DevExpress.XtraLayout.v22.2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.XtraNavBar.v22.2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.XtraPivotGrid.v22.2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.XtraPrinting.v22.1.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.XtraPrinting.v22.2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.XtraRichEdit.v22.1.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.XtraRichEdit.v22.2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.XtraTreeList.v22.1.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.XtraTreeList.v22.2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.XtraVerticalGrid.v22.2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DevExpress.XtraWizard.v22.2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DotNetZip.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • FastColoredTextBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • IP2Region.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • IconExtractor.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Keylogger.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • MessagePackLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Microsoft.Win32.Primitives.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • PeNet.Asn1.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • PeNet.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Audio.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Discord.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Extra.dll
    .dll .ps1 windows:4 windows x86 arch:x86 polyglot

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/FileManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/FileSearcher.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Fun.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/HVNCStub.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Information.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Keylogger.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Plugins/Keylogger.exe.config
    .xml
  • Plugins/Logger.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Miscellaneous.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Netstat.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Options.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/ProcessManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Recovery.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Regedit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/RemoteCamera.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/RemoteDesktop.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/ReverseProxy.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/SendFile.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/SendMemory.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Stealer.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Stealer.dll.config
    .xml
  • Plugins/hvnc.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Plugins/ip2region.db
  • Plugins/x64/SQLite.Interop.dll
    .dll windows:5 windows x64 arch:x64

    d0e920f0f19a6bb30b14317da522b487


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/x86/SQLite.Interop.dll
    .dll windows:5 windows x86 arch:x86

    d7c5f86c3fc85be3e472e29f7bd1903c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resources.resx
    .vbs .xml polyglot
  • SMDiagnostics.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • Server.Properties.Resources.resources
    .ps1
  • Server.Properties.Resources.resources.txt
    .ps1
  • Stub/ClientAny.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Stub/Clientx64.exe
    .exe windows:4 windows x64 arch:x64

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Stub/Clientx86.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • System.IO.Compression.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.ServiceModel.Internals.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • Venom RAT + HVNC + Stealer + Grabber.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Venom RAT + HVNC + Stealer + Grabber.exe.config
    .xml
  • VenomServer.p12
  • Vestris.ResourceLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • __MACOSX/._BouncyCastle.Crypto.dll
  • __MACOSX/._Client.exe
  • __MACOSX/._ClientsFolder
  • __MACOSX/._DevExpress.Charts.v22.2.Core.dll
  • __MACOSX/._DevExpress.CodeParser.v22.2.dll
  • __MACOSX/._DevExpress.Data.Desktop.v22.1.dll
  • __MACOSX/._DevExpress.Data.Desktop.v22.2.dll
  • __MACOSX/._DevExpress.Data.v22.1.dll
  • __MACOSX/._DevExpress.Data.v22.2.dll
  • __MACOSX/._DevExpress.DataAccess.v22.2.UI.dll
  • __MACOSX/._DevExpress.DataAccess.v22.2.dll
  • __MACOSX/._DevExpress.DataVisualization.v22.2.Core.dll
  • __MACOSX/._DevExpress.Diagram.v22.2.Core.dll
  • __MACOSX/._DevExpress.Dialogs.v22.2.Core.dll
  • __MACOSX/._DevExpress.Drawing.v22.1.dll
  • __MACOSX/._DevExpress.Drawing.v22.2.dll
  • __MACOSX/._DevExpress.Images.v22.1.dll
  • __MACOSX/._DevExpress.Images.v22.2.dll
  • __MACOSX/._DevExpress.Mvvm.v22.2.dll
  • __MACOSX/._DevExpress.Office.v22.1.Core.dll
  • __MACOSX/._DevExpress.Office.v22.2.Core.dll
  • __MACOSX/._DevExpress.Pdf.v22.1.Core.dll
  • __MACOSX/._DevExpress.Pdf.v22.1.Drawing.dll
  • __MACOSX/._DevExpress.Pdf.v22.2.Core.dll
  • __MACOSX/._DevExpress.Pdf.v22.2.Drawing.dll
  • __MACOSX/._DevExpress.PivotGrid.v22.2.Core.dll
  • __MACOSX/._DevExpress.Printing.v22.1.Core.dll
  • __MACOSX/._DevExpress.Printing.v22.2.Core.dll
  • __MACOSX/._DevExpress.RichEdit.v22.1.Core.dll
  • __MACOSX/._DevExpress.RichEdit.v22.2.Core.dll
  • __MACOSX/._DevExpress.RichEdit.v22.2.Export.dll
  • __MACOSX/._DevExpress.Sparkline.v22.1.Core.dll
  • __MACOSX/._DevExpress.Sparkline.v22.2.Core.dll
  • __MACOSX/._DevExpress.Utils.v22.1.dll
  • __MACOSX/._DevExpress.Utils.v22.2.UI.dll
  • __MACOSX/._DevExpress.Utils.v22.2.dll
  • __MACOSX/._DevExpress.WinRTPresenter.Launcher.exe
  • __MACOSX/._DevExpress.Xpo.v22.2.dll
  • __MACOSX/._DevExpress.XtraBars.v22.1.dll
  • __MACOSX/._DevExpress.XtraBars.v22.2.dll
  • __MACOSX/._DevExpress.XtraCharts.v22.2.Extensions.dll
  • __MACOSX/._DevExpress.XtraCharts.v22.2.UI.dll
  • __MACOSX/._DevExpress.XtraCharts.v22.2.Wizard.dll
  • __MACOSX/._DevExpress.XtraCharts.v22.2.dll
  • __MACOSX/._DevExpress.XtraDiagram.v22.2.dll
  • __MACOSX/._DevExpress.XtraDialogs.v22.2.dll
  • __MACOSX/._DevExpress.XtraEditors.v22.1.dll
  • __MACOSX/._DevExpress.XtraEditors.v22.2.dll
  • __MACOSX/._DevExpress.XtraGrid.v22.1.dll
  • __MACOSX/._DevExpress.XtraGrid.v22.2.dll
  • __MACOSX/._DevExpress.XtraLayout.v22.1.dll
  • __MACOSX/._DevExpress.XtraLayout.v22.2.dll
  • __MACOSX/._DevExpress.XtraNavBar.v22.2.dll
  • __MACOSX/._DevExpress.XtraPivotGrid.v22.2.dll
  • __MACOSX/._DevExpress.XtraPrinting.v22.1.dll
  • __MACOSX/._DevExpress.XtraPrinting.v22.2.dll
  • __MACOSX/._DevExpress.XtraRichEdit.v22.1.dll
  • __MACOSX/._DevExpress.XtraRichEdit.v22.2.dll
  • __MACOSX/._DevExpress.XtraTreeList.v22.1.dll
  • __MACOSX/._DevExpress.XtraTreeList.v22.2.dll
  • __MACOSX/._DevExpress.XtraVerticalGrid.v22.2.dll
  • __MACOSX/._DevExpress.XtraWizard.v22.2.dll
  • __MACOSX/._DotNetZip.dll
  • __MACOSX/._FastColoredTextBox.dll
  • __MACOSX/._IP2Region.dll
  • __MACOSX/._IconExtractor.dll
  • __MACOSX/._Keylogger.exe
  • __MACOSX/._MessagePackLib.dll
  • __MACOSX/._Microsoft.Win32.Primitives.dll
  • __MACOSX/._Newtonsoft.Json.dll
  • __MACOSX/._PeNet.Asn1.dll
  • __MACOSX/._PeNet.dll
  • __MACOSX/._Plugins
  • __MACOSX/._Resources.resx
  • __MACOSX/._SMDiagnostics.dll
  • __MACOSX/._Server.Properties.Resources.resources
  • __MACOSX/._Server.Properties.Resources.resources.txt
  • __MACOSX/._Stub
  • __MACOSX/._System.IO.Compression.dll
  • __MACOSX/._System.ServiceModel.Internals.dll
  • __MACOSX/._Venom RAT + HVNC + Stealer + Grabber.exe
  • __MACOSX/._Venom RAT + HVNC + Stealer + Grabber.exe.config
  • __MACOSX/._VenomServer.p12
  • __MACOSX/._Vestris.ResourceLib.dll
  • __MACOSX/._cGeoIp.dll
  • __MACOSX/._dnlib.dll
  • __MACOSX/._netstandard.dll
  • __MACOSX/._offline
  • __MACOSX/._online
  • __MACOSX/._protobuf-net.Core.dll
  • __MACOSX/._protobuf-net.dll
  • __MACOSX/Plugins/._Audio.dll
  • __MACOSX/Plugins/._Discord.dll
  • __MACOSX/Plugins/._Extra.dll
  • __MACOSX/Plugins/._FileManager.dll
  • __MACOSX/Plugins/._FileSearcher.dll
  • __MACOSX/Plugins/._Fun.dll
  • __MACOSX/Plugins/._HVNCStub.dll
  • __MACOSX/Plugins/._Information.dll
  • __MACOSX/Plugins/._Keylogger.exe
  • __MACOSX/Plugins/._Keylogger.exe.config
  • __MACOSX/Plugins/._Logger.dll
  • __MACOSX/Plugins/._Miscellaneous.dll
  • __MACOSX/Plugins/._Netstat.dll
  • __MACOSX/Plugins/._Options.dll
  • __MACOSX/Plugins/._ProcessManager.dll
  • __MACOSX/Plugins/._Recovery.dll
  • __MACOSX/Plugins/._Regedit.dll
  • __MACOSX/Plugins/._RemoteCamera.dll
  • __MACOSX/Plugins/._RemoteDesktop.dll
  • __MACOSX/Plugins/._ReverseProxy.dll
  • __MACOSX/Plugins/._SendFile.dll
  • __MACOSX/Plugins/._SendMemory.dll
  • __MACOSX/Plugins/._Stealer.dll
  • __MACOSX/Plugins/._Stealer.dll.config
  • __MACOSX/Plugins/._hvnc.exe
  • __MACOSX/Plugins/._ip2region.db
  • __MACOSX/Plugins/._x64
  • __MACOSX/Plugins/._x86
  • __MACOSX/Plugins/x64/._SQLite.Interop.dll
  • __MACOSX/Plugins/x86/._SQLite.Interop.dll
  • __MACOSX/Stub/._ClientAny.exe
  • __MACOSX/Stub/._Clientx64.exe
  • __MACOSX/Stub/._Clientx86.exe
  • cGeoIp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • dnlib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • netstandard.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • offline
  • online
  • protobuf-net.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • protobuf-net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections