Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    03-12-2024 12:41

General

  • Target

    VenomRAT/DevExpress.Office.v22.1.Core.dll

  • Size

    3.7MB

  • MD5

    04481d41b4edffc33d43dc7b3c21879b

  • SHA1

    9bdfc1ae5bc61699e2705aa58e693ce745c35f88

  • SHA256

    10c2ef3e11a2a2cdac160d4299cd541d6b1f75613ae7adec7689e71d365f7e21

  • SHA512

    76e6a7326e06c3a57d056fb139cb655382017336b422b606a3237d472e7a443d59c71e08a060b3c84a9129d507e458a8f990fef872e5f6e7600f62bd5b02a59a

  • SSDEEP

    49152:3eqp7uMm3b6vbhMVlddimWL1S1wUwyWFN:3eqRTY1WL1S1wUwyWj

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\VenomRAT\DevExpress.Office.v22.1.Core.dll,#1
    1⤵
      PID:1880

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads