Overview
overview
10Static
static
10VenomRAT.7z
windows10-ltsc 2021-x64
10VenomRAT/P...er.exe
windows10-ltsc 2021-x64
1VenomRAT/P...nc.exe
windows10-ltsc 2021-x64
1VenomRAT/S...ny.exe
windows10-ltsc 2021-x64
10VenomRAT/S...64.exe
windows10-ltsc 2021-x64
10VenomRAT/S...86.exe
windows10-ltsc 2021-x64
10VenomRAT/V...er.exe
windows10-ltsc 2021-x64
7Analysis
-
max time kernel
246s -
max time network
280s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241023-en -
resource tags
arch:x64arch:x86image:win10ltsc2021-20241023-enlocale:en-usos:windows10-ltsc 2021-x64system -
submitted
03-12-2024 12:32
Behavioral task
behavioral1
Sample
VenomRAT.7z
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral2
Sample
VenomRAT/Plugins/Keylogger.exe
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral3
Sample
VenomRAT/Plugins/hvnc.exe
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral4
Sample
VenomRAT/Stub/ClientAny.exe
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral5
Sample
VenomRAT/Stub/Clientx64.exe
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral6
Sample
VenomRAT/Stub/Clientx86.exe
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral7
Sample
VenomRAT/Venom RAT + HVNC + Stealer + Grabber.exe
Resource
win10ltsc2021-20241023-en
General
-
Target
VenomRAT/Plugins/Keylogger.exe
-
Size
13KB
-
MD5
b891f6eac297cc501c01687a041e2ca5
-
SHA1
2dd0748b0952dc7d73943f0b24f5036a2773bf24
-
SHA256
b0df63466dd20c4f860263eafba2feb255bf31ea43264a142f8e9010b27d016c
-
SHA512
d525c84a2ab967d65c5538aa46c0a126221582c820bde9c101105f27ea8d0c819161a1764872bb6e469c07bc2f53003e7a453e518ffa59aaa919370687bd90a6
-
SSDEEP
384:A4MtOoYttncuYsLhH3dF5L18GEP8Tx/NoE:qEbtQO5LS/P8Tx/n
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2636 Keylogger.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2636 Keylogger.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2636 Keylogger.exe