General
- Target Venom Cracked 2.7.0.0 - Cracked.rar
- Size 33.4MB
- Sample240801-kwmgvasenn
- SHA256 3aaadd1e3b3cccf400661d70f2d5e2995e828a6f32f801b6fdc6411fb5b3769c
- MD5 6a27464ff8c3a46543211e4e04446247
- SHA1 15cd7652849fb003f77bbfa8cfb278e3527b2b49
- SHA512 985cbf9da785ea54657f6ed27c40a29ce6cef41b5cd40034bcf85d224a43ceea8635c452bb5b7ac746bd8dc4fa29b0c705385042ef1c6181fc6300d3c7dbe66d
- SSDEEP 786432:uwuGC2adE7onPkvwdG4p1NhtnrX2ZRCJAaXZqfYkKzZsAgdoZ4:EAWP11p1NhKIDXPVsAcoZ4
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
Venom Cracked 2.7.0.0 - Cracked.rar
Resource
win11-20240730-en
Behavioral task
behavioral2
Sample
Venom Cracked 2.7.0.0 - Cracked/Venom Cracked 2.7.0.0/Telegram Channel.url
Resource
win11-20240730-en
Behavioral task
behavioral3
Sample
Venom Cracked 2.7.0.0 - Cracked/Venom Cracked 2.7.0.0/VenomRemote Crack.exe
Resource
win11-20240730-en
Behavioral task
behavioral4
Sample
Venom Cracked 2.7.0.0 - Cracked/Venom Cracked 2.7.0.0/Venombin.exe
Resource
win11-20240730-en
Behavioral task
behavioral5
Sample
Venom Cracked 2.7.0.0 - Cracked/Venom Cracked 2.7.0.0/client.exe
Resource
win11-20240730-en
Behavioral task
behavioral6
Sample
Venom Cracked 2.7.0.0 - Cracked/Venom Cracked 2.7.0.0/vncviewer.exe
Resource
win11-20240730-en
Malware Config
Extracted
-
quasar
-
reconnect_delay
5000
Targets
-
- Target Venom Cracked 2.7.0.0 - Cracked.rar
- Size 33.4MB
- SHA256 3aaadd1e3b3cccf400661d70f2d5e2995e828a6f32f801b6fdc6411fb5b3769c
- MD5 6a27464ff8c3a46543211e4e04446247
- SHA1 15cd7652849fb003f77bbfa8cfb278e3527b2b49
- SHA512 985cbf9da785ea54657f6ed27c40a29ce6cef41b5cd40034bcf85d224a43ceea8635c452bb5b7ac746bd8dc4fa29b0c705385042ef1c6181fc6300d3c7dbe66d
- SSDEEP 786432:uwuGC2adE7onPkvwdG4p1NhtnrX2ZRCJAaXZqfYkKzZsAgdoZ4:EAWP11p1NhKIDXPVsAcoZ4
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target Venom Cracked 2.7.0.0 - Cracked/Venom Cracked 2.7.0.0/Telegram Channel.url
- Size 123B
- SHA256 6a032d543645fee6dfc238a6afc1a944457cb9a7399ad235995df485d1be1b29
- MD5 c3d8a77ba0d6329fb51556393ae42077
- SHA1 0038d72860f63cd84ddd4b58652cd4a640fa53dc
- SHA512 20c93a9f750f6e93ae7129f830b1f1bf32acbbcd171a18c62a7c05f43d5642e0ac36909585c99d64c296d59ae4a2c36c495290573d3368fecb010aead8c9b84c
- MD5 SHA1 SHA512
Score1/10 -
- Target Venom Cracked 2.7.0.0 - Cracked/Venom Cracked 2.7.0.0/VenomRemote Crack.exe
- Size 31.1MB
- SHA256 3dda8b24aff9312794b3d8da9884b6f7da2a4066a17a295eb738b9f98a877765
- MD5 e52cd213e9d4b31dd9674ab79d5a40c4
- SHA1 c10c06c7313aeca1126d1e46e3c3136ac8c44968
- SHA512 d7519ccaffa0555e359951bd6c4e1009d606dff1e73bac80192d92aca8667ba8625f9875253e33b43ca851d8e307d5413dbdfb4a696ab3a1738fd7e1c39ce8cd
- SSDEEP 393216:tmGXflmXJTD1jJTDQMvfOjmM27kv1Bx0bQox/UlGkNCoIZ5JTD22JTD:AGNxMvDUjCbQa/O11
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target Venom Cracked 2.7.0.0 - Cracked/Venom Cracked 2.7.0.0/Venombin.exe
- Size 2.6MB
- SHA256 a9da04a7a49309e177655fb41589cac45813b8a98e469225f58ed137a6fe3078
- MD5 28ab86b3dcd21945ecf0d61cff33f0af
- SHA1 5117b7fea972011d5d8744632d5052d92d93bc64
- SHA512 2c7370fe9fa0b0ca15bbb29c7b9b102978555aab02f6ced0a59773146f0f72e6b2d6994a3f99851bd4bd63a4e07a88751090aece1ce34ed1c97f97ead0fbe6f8
- SSDEEP 49152:LwujSJcbl8P1SatwwzD/jYg26ErFHFWX42BkkDITTf:TjSJIwsatPD/j06QhGs3f
- MD5 SHA1 SHA512 SSDEEP
-
Quasar payload
-
Legitimate hosting services abused for malware hosting/C2
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target Venom Cracked 2.7.0.0 - Cracked/Venom Cracked 2.7.0.0/client.bin
- Size 904KB
- SHA256 82f35cefdffb27759bf8665c9b997401c5df88e631531a4fd2cfee456f84246e
- MD5 b0e8ff9dd5453104b5b868262fd7a164
- SHA1 f33424612617cb6fa9bdc2327c6e70f29d189bd4
- SHA512 fee5032e8d5956ed6fcf1d167118a9ac19dd4b251c57689eb5596161c263d84dca62bf1fb708f1dfe9773716943109db93efccabd3db87037cfb95acd3768f1c
- SSDEEP 12288:mreLatt+487Ti+XVPJTtnBLF/5DJcTYTTups0MJ2XOtXwlkXbPkooLo:aej487Ti+XVPJTtnBLF/5DJ/lXwlkZf
- MD5 SHA1 SHA512 SSDEEP
-
Quasar payload
-
- Target Venom Cracked 2.7.0.0 - Cracked/Venom Cracked 2.7.0.0/vncviewer.exe
- Size 3.1MB
- SHA256 e05e6fe9e454c132a68db6a76a4413250cbdb98b2b9a956353c90f60ac6fa422
- MD5 38791f0aa86973d6c674bc7ea7e08fea
- SHA1 27e3999c2fc4e2b145ad5d4e0d17f38b7b032101
- SHA512 35fbf43c12f18d15291cf1dbc9d8439369d955f1c2e2f7874cce5a38a1918e03ae253af847de10e80376f0318ec89ede2bef054c652c2071d689af232089ea02
- SSDEEP 49152:ZIJ8T0d+Z9RbxOz5ZA8bPZZI47dMgRppq/WgT33qFHM5l9l:69eTyzZW4tWOMl
- MD5 SHA1 SHA512 SSDEEP
Score1/10