Overview

overview

3

Static

static

3

Venom.exe

windows7-x64

1

Venom.exe

windows10-2004-x64

1

_bz2.dll

windows7-x64

1

_bz2.dll

windows10-2004-x64

1

_cffi_backend.dll

windows7-x64

1

_cffi_backend.dll

windows10-2004-x64

1

_ctypes.dll

windows7-x64

1

_ctypes.dll

windows10-2004-x64

1

_decimal.dll

windows7-x64

1

_decimal.dll

windows10-2004-x64

1

_hashlib.dll

windows7-x64

1

_hashlib.dll

windows10-2004-x64

1

_lzma.dll

windows7-x64

1

_lzma.dll

windows10-2004-x64

1

_queue.dll

windows7-x64

1

_queue.dll

windows10-2004-x64

1

_ssl.dll

windows7-x64

1

_ssl.dll

windows10-2004-x64

1

_wmi.dll

windows7-x64

1

_wmi.dll

windows10-2004-x64

1

bcrypt/_bcrypt.dll

windows7-x64

1

bcrypt/_bcrypt.dll

windows10-2004-x64

1

charset_no...md.dll

windows7-x64

1

charset_no...md.dll

windows10-2004-x64

1

charset_no...yc.dll

windows7-x64

1

charset_no...yc.dll

windows10-2004-x64

1

cryptograp...st.dll

windows7-x64

1

cryptograp...st.dll

windows10-2004-x64

1

libcrypto-3.dll

windows7-x64

1

libcrypto-3.dll

windows10-2004-x64

1

libffi-8.dll

windows7-x64

1

libffi-8.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Venom.zip

  • Size

    15.4MB

  • MD5

    ca999680aa36bf9df67b819e2c95f01c

  • SHA1

    f228cbf4d9bad96d2c8ec216d3530dc3a28af394

  • SHA256

    16e8c421037a1150257fef325058484e9545b1177585aee35f3455d13884d7df

  • SHA512

    acf83daa6cb1e3acdda1e1a82b052030646f39df4160c932ef236970110eca317afaf758eae7860a97b285bebee385ce75921a1a1ed85e2b802ac2dfa5cec355

  • SSDEEP

    393216:eR5tOAQxjVBw2AFRUh82qMRdNVNQejSUYpxrVTdmX1FeL+2Ue:eRXCBwnRUVVR3VNUpxrfmX6i2P

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • Venom.zip
    .zip
  • Venom.exe
    .exe windows:4 windows x64 arch:x64

    13479c28c65ab59c9d0ddec1066da956


    Headers

    Imports

    Sections

  • _bz2.pyd
    .dll windows:6 windows x64 arch:x64

    a36962884764276bb35985709aa4e40d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _cffi_backend.pyd
    .dll windows:6 windows x64 arch:x64

    8f8d662a942cad4ff1001cad6ca84431


    Headers

    Imports

    Exports

    Sections

  • _ctypes.pyd
    .dll windows:6 windows x64 arch:x64

    c7e678778370beefa2be60d7f0444c52


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _decimal.pyd
    .dll windows:6 windows x64 arch:x64

    45cfc0dbb456d5511c83e751dbe4c179


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _hashlib.pyd
    .dll windows:6 windows x64 arch:x64

    a8173ef8679f8544a88e355945112c77


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _lzma.pyd
    .dll windows:6 windows x64 arch:x64

    b865edd9b0c291111893fc2b523f7264


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _queue.pyd
    .dll windows:6 windows x64 arch:x64

    efe3e840cb4904222351e9b7f17afea3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _socket.pyd
    .dll .js windows:6 windows x64 arch:x64 polyglot

    de62106114a70bb3c0dfb5c6513e0ba1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _ssl.pyd
    .dll windows:6 windows x64 arch:x64

    7ff099707b1756904a37967ff290adb7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _wmi.pyd
    .dll windows:6 windows x64 arch:x64

    a5c1c822c7f91c00d16d1dd7f10e20e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bcrypt/_bcrypt.pyd
    .dll windows:6 windows x64 arch:x64

    e8756b03cb7d0aaae4e09b567569083b


    Headers

    Imports

    Exports

    Sections

  • certifi/cacert.pem
  • charset_normalizer/md.pyd
    .dll windows:6 windows x64 arch:x64

    f9f58fd722dea53fe5b29a3d6dba9a29


    Headers

    Imports

    Exports

    Sections

  • charset_normalizer/md__mypyc.pyd
    .dll windows:6 windows x64 arch:x64

    facfc5ec70708b6566f37401fb8a64c6


    Headers

    Imports

    Exports

    Sections

  • cryptography/hazmat/bindings/_rust.pyd
    .dll windows:6 windows x64 arch:x64

    1aaf19e6e21696d67018db32daf0d41d


    Headers

    Imports

    Exports

    Sections

  • libcrypto-3.dll
    .dll windows:6 windows x64 arch:x64

    40bce6a23883072a66c68006f08e105c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libffi-8.dll
    .dll windows:6 windows x64 arch:x64

    3dc8b86d60f90a1851eee5f9dc191312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libssl-3.dll
    .dll windows:6 windows x64 arch:x64

    dc44c25ab05f2ed83d242e885f9b4799


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • python3.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • python312.dll
    .dll windows:6 windows x64 arch:x64

    f8e2e55d20d3c537df33c9a83eab99cf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • select.pyd
    .dll windows:6 windows x64 arch:x64

    e41677fc9cd5514cd954ce2ce19e425c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • unicodedata.pyd
    .dll windows:6 windows x64 arch:x64

    a3519e9a1b69560ea1c5fe43fd626ac5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    7f07fd94e5bb907093556781cc464017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    72707e942878aac770fcc118ce3ec1c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • zstandard/_cffi.pyd
    .dll windows:6 windows x64 arch:x64

    a4f663bc77d2671c859ff6226656a2fb


    Headers

    Imports

    Exports

    Sections

  • zstandard/backend_c.pyd
    .dll windows:6 windows x64 arch:x64

    632b1925db83ff52d517ea5b3c13142f


    Headers

    Imports

    Exports

    Sections