General

  • Target

    VenomRat.exe

  • Size

    74KB

  • MD5

    8bdb5cf4cdc68eb898c0d4819607b96f

  • SHA1

    abe2f9b5540cdcc169e0c10276039f952a145269

  • SHA256

    778b20a18ecbf924d653e3066bf650b752bac7cd7a0c35d7aef1a824870793c7

  • SHA512

    3e36dcb05841d4b46747c42ca2a8d5dadd4aa6cdfde350f833a64091f93341fc9c7a45a9e7a20db8369cf9ef48e5e1b1593cd6371c9e1fdb2dc62973d342abd6

  • SSDEEP

    1536:8lnbgrvV58TdPZegtB+/kYZbdUIVkmETOz91vOZwn40d:85bgrNaxvA5ZbSI0TOhIN0d

Score
10/10

Malware Config

Extracted

Family

xworm

C2

22.ip.gl.ply.gg:33199

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • VenomRat.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections