Analysis
-
max time kernel
83s -
max time network
96s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
27-09-2024 20:17
General
-
Target
VenomRAT v6.0.3_p_/Venom RAT_p_.exe
-
Size
14.2MB
-
MD5
fb902fb0843e4f12d068b3bcd08b2e77
-
SHA1
96038a62a3ea6da4f11981f80ce4961ff50fbe4d
-
SHA256
2743f6791b5a525252a3e138d05ecda170d0fa758e1616cf96335648c572f068
-
SHA512
2c188572aadc906c6971ec13f0ae7b9f79c6a88a2fd34add00ee1b2d74f14cf895a86d2ba47036a1b1e7c8e00cd5adb0387baaea7fd5e5f93feaed98bb1dc6f6
-
SSDEEP
196608:Wja6chUZX81lbFklbYJygrP7aIBhLkNPFCZZwiJl1NLIsPA8fxvuIMzd/95UhS1w:TT+P+Zw6NLIsFfskh1BmXG0w
Score
10/10
Malware Config
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Suspicious behavior: EnumeratesProcesses 25 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\VenomRAT v6.0.3_p_\Venom RAT_p_.exe"C:\Users\Admin\AppData\Local\Temp\VenomRAT v6.0.3_p_\Venom RAT_p_.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
14.2MB
-
Filesize
20.0MB
-
Filesize
5.1MB
-
Filesize
2.3MB
-
Filesize
10.8MB
-
Filesize
320KB
-
Filesize
864KB
-
Filesize
7.7MB
-
Filesize
6.6MB
-
Filesize
3.6MB
-
Filesize
4.5MB
-
Filesize
128KB
-
Filesize
10.8MB
-
Filesize
2.1MB
-
Filesize
8KB
-
Filesize
10.8MB