46c17ffefbfcaa044cbbcbb33d6219da84538c22a51e53bff647c87da33a0bd9

Submit
Reports

Overview

overview

Static

static

VenomRAT v...to.dll

windows7-x64

VenomRAT v...to.dll

windows10-2004-x64

VenomRAT v...nt.exe

windows7-x64

VenomRAT v...nt.exe

windows10-2004-x64

VenomRAT v...re.dll

windows7-x64

VenomRAT v...re.dll

windows10-2004-x64

VenomRAT v....2.dll

windows7-x64

VenomRAT v....2.dll

windows10-2004-x64

VenomRAT v....1.dll

windows7-x64

VenomRAT v....1.dll

windows10-2004-x64

VenomRAT v....2.dll

windows7-x64

VenomRAT v....2.dll

windows10-2004-x64

VenomRAT v....1.dll

windows7-x64

VenomRAT v....1.dll

windows10-2004-x64

VenomRAT v....2.dll

windows7-x64

VenomRAT v....2.dll

windows10-2004-x64

VenomRAT v...UI.dll

windows7-x64

VenomRAT v...UI.dll

windows10-2004-x64

VenomRAT v...per.js

windows7-x64

VenomRAT v...per.js

windows10-2004-x64

VenomRAT v...ker.js

windows7-x64

VenomRAT v...ker.js

windows10-2004-x64

VenomRAT v...em.vbs

windows7-x64

VenomRAT v...em.vbs

windows10-2004-x64

VenomRAT v...ify.js

windows7-x64

VenomRAT v...ify.js

windows10-2004-x64

VenomRAT v...Box.js

windows7-x64

VenomRAT v...Box.js

windows10-2004-x64

VenomRAT v...ms.vbs

windows7-x64

VenomRAT v...ms.vbs

windows10-2004-x64

VenomRAT v...gs.vbs

windows7-x64

VenomRAT v...gs.vbs

windows10-2004-x64

Analysis

max time kernel
147s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
25-09-2024 13:41

Sharing

Copy URL

Twitter E-mail

Static task

static1

5 signatures

Behavioral task

behavioral1

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/BouncyCastle.Crypto.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/BouncyCastle.Crypto.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Client.exe

Resource

win7-20240903-en

asyncrat default rat

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Client.exe

Resource

win10v2004-20240802-en

asyncrat default rat

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/DevExpress.Charts.v22.2.Core.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/DevExpress.Charts.v22.2.Core.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/DevExpress.CodeParser.v22.2.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/DevExpress.CodeParser.v22.2.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/DevExpress.Data.Desktop.v22.1.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/DevExpress.Data.Desktop.v22.1.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/DevExpress.Data.Desktop.v22.2.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/DevExpress.Data.Desktop.v22.2.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/DevExpress.Data.v22.1.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/DevExpress.Data.v22.1.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/DevExpress.Data.v22.2.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/DevExpress.Data.v22.2.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/DevExpress.DataAccess.v22.2.UI.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/DevExpress.DataAccess.v22.2.UI.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Source Code/Helper/RegistryKeyHelper.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Source Code/Helper/RegistryKeyHelper.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Source Code/Helper/RegistrySeeker.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Source Code/Helper/RegistrySeeker.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Source Code/Helper/RegistryValueLstItem.vbs

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Source Code/Helper/RegistryValueLstItem.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Source Code/Helper/TelegramNotify.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Source Code/Helper/TelegramNotify.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Source Code/Helper/WordTextBox.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Source Code/Helper/WordTextBox.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Source Code/Params/KeylogParams.vbs

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Source Code/Params/KeylogParams.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Source Code/Properties/Settings.vbs

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Source Code/Properties/Settings.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/DevExpress.Charts.v22.2.Core.dll
Size

1023KB
MD5

bcfa59a0896b924b2d8f1a50d4a1d970
SHA1

5f0ad9f59f852023d5a1d3377bdf45ec2b45b52a
SHA256

de682a0d612ec7d45a0accd8fbbb90db374d652ec68b52317170082a2afe7f31
SHA512

604f26842788e851822915bb9e80ca2af392b8e82ae4cffa0160cc761303098795615e00356665117b4ee1be421d74d46b8ca13bca220bd97f04f7b575a5f4d3
SSDEEP

12288:bBj6U3pbVIy5rPW9s9d9r6AXe2w8jnHXRM1bnMLdvzL2bpujxZZyNdqTfFlL31XA:Fj3f6Mw8jnHXQe7S0yWTfFJQMXn3AL

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\VenomRAT v6.0.3 (+SOURCE)\VenomRAT v6.0.3 (SOURCE)\DevExpress.Charts.v22.2.Core.dll",#1
1⤵
PID:2360

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads