Overview

overview

10

Static

static

10

VenomRAT_v6.0.3.rar

windows11-21h2-x64

7

VenomRAT_v...to.dll

windows11-21h2-x64

1

VenomRAT_v...re.dll

windows11-21h2-x64

1

VenomRAT_v....2.dll

windows11-21h2-x64

1

VenomRAT_v....1.dll

windows11-21h2-x64

1

VenomRAT_v....2.dll

windows11-21h2-x64

1

VenomRAT_v....1.dll

windows11-21h2-x64

1

VenomRAT_v....2.dll

windows11-21h2-x64

1

VenomRAT_v...UI.dll

windows11-21h2-x64

1

VenomRAT_v....2.dll

windows11-21h2-x64

1

VenomRAT_v...re.dll

windows11-21h2-x64

1

VenomRAT_v...re.dll

windows11-21h2-x64

1

VenomRAT_v...re.dll

windows11-21h2-x64

1

VenomRAT_v....1.dll

windows11-21h2-x64

1

VenomRAT_v....2.dll

windows11-21h2-x64

1

VenomRAT_v....1.dll

windows11-21h2-x64

1

VenomRAT_v....2.dll

windows11-21h2-x64

1

VenomRAT_v....2.dll

windows11-21h2-x64

1

VenomRAT_v...re.dll

windows11-21h2-x64

1

VenomRAT_v...re.dll

windows11-21h2-x64

1

VenomRAT_v...re.dll

windows11-21h2-x64

1

VenomRAT_v...ng.dll

windows11-21h2-x64

1

VenomRAT_v...re.dll

windows11-21h2-x64

1

VenomRAT_v...ng.dll

windows11-21h2-x64

1

VenomRAT_v...xe.xml

windows11-21h2-x64

1

VenomRAT_v...ll.xml

windows11-21h2-x64

1

VenomRAT_v...ion.db

windows11-21h2-x64

3

VenomRAT_v...es.vbs

windows11-21h2-x64

1

VenomRAT_v...xe.xml

windows11-21h2-x64

1

VenomRAT_v...er.p12

windows11-21h2-x64

5

VenomRAT_v...ffline

windows11-21h2-x64

1

VenomRAT_v...online

windows11-21h2-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    VenomRAT_v6.0.3.rar

  • Size

    92.3MB

  • Sample

    241210-18ln3sxjgl

  • MD5

    7cbabf71dd915f44b67f1765e805e5ab

  • SHA1

    bc44d2fd089fc818824a5eb8f3c4310636dc2b81

  • SHA256

    668bf9ed54120899b86b21a8aa1df1075937b8c05cfca52817746b6e418e2006

  • SHA512

    9a3171a9c0f813b2c228348d2d4a3b94457578a6d1d5f80d7780fffcc3d67731b49b2cfe38f6ba4498203f1551e7c1cbc7b60d2ccc4dd8412943bc634a870509

  • SSDEEP

    1572864:Ox40amHGeCj7VmyotHgaspW71f6xJgOBWWqwGaoAaCAOEFHiWlMvbRje/L20J1XP:raCj7VJoBgaMW75KC1Wq0TUORWudA203

Score
10/10
asyncratstormkittyrat

Malware Config

Targets

    • Target

      VenomRAT_v6.0.3.rar

    • Size

      92.3MB

    • MD5

      7cbabf71dd915f44b67f1765e805e5ab

    • SHA1

      bc44d2fd089fc818824a5eb8f3c4310636dc2b81

    • SHA256

      668bf9ed54120899b86b21a8aa1df1075937b8c05cfca52817746b6e418e2006

    • SHA512

      9a3171a9c0f813b2c228348d2d4a3b94457578a6d1d5f80d7780fffcc3d67731b49b2cfe38f6ba4498203f1551e7c1cbc7b60d2ccc4dd8412943bc634a870509

    • SSDEEP

      1572864:Ox40amHGeCj7VmyotHgaspW71f6xJgOBWWqwGaoAaCAOEFHiWlMvbRje/L20J1XP:raCj7VJoBgaMW75KC1Wq0TUORWudA203

    Score
    7/10

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Executes dropped EXE

    behavioral1

    • Target

      VenomRAT_v6.0.3/BouncyCastle.Crypto.dll

    • Size

      2.5MB

    • MD5

      f0b3e112ce4807a28e2b5d66a840ed7f

    • SHA1

      54a6743781fd4ceb720331fce92f16186931192d

    • SHA256

      333903c7d22a27098e45fc64b77a264aa220605cfbd3e329c200d7e4b42c881c

    • SHA512

      dc8ec9754c5e86f7e54e75ff3e5859c1b057f90e9c41788037b944a5db2cb3b70060763d0efcbe55ec595bcc47a9c0ff847a4876821470ca1659c31afd5b0190

    • SSDEEP

      49152:OSSJ+G1PjodumkjD6Oc0mqHZwueCtbu9kQN:6xodumo6Lr

    Score
    1/10
    behavioral2

    • Target

      VenomRAT_v6.0.3/DevExpress.Charts.v22.2.Core.dll

    • Size

      1023KB

    • MD5

      bcfa59a0896b924b2d8f1a50d4a1d970

    • SHA1

      5f0ad9f59f852023d5a1d3377bdf45ec2b45b52a

    • SHA256

      de682a0d612ec7d45a0accd8fbbb90db374d652ec68b52317170082a2afe7f31

    • SHA512

      604f26842788e851822915bb9e80ca2af392b8e82ae4cffa0160cc761303098795615e00356665117b4ee1be421d74d46b8ca13bca220bd97f04f7b575a5f4d3

    • SSDEEP

      12288:bBj6U3pbVIy5rPW9s9d9r6AXe2w8jnHXRM1bnMLdvzL2bpujxZZyNdqTfFlL31XA:Fj3f6Mw8jnHXQe7S0yWTfFJQMXn3AL

    Score
    1/10
    behavioral3

    • Target

      VenomRAT_v6.0.3/DevExpress.CodeParser.v22.2.dll

    • Size

      1.7MB

    • MD5

      ec3a80bc6de2d32444c582f31c14000f

    • SHA1

      e4d880a4845095b18cc13b98d2d8f46d2c894a36

    • SHA256

      aa74c8d4b98543a9f277860c7d11a64d762b4dd20d93acdbe0e4193fb69d5245

    • SHA512

      7b469292db8fdb315a0647a060e28f6d2a5ff9fce81e4a5d8db9438b28fec7144b9ab02177fe8cb4bf7a54c407c8dca9dbfed437e8f0b71ead1bab2043b90eef

    • SSDEEP

      24576:O2pK1qXadH/E7i39l5/uwPSs/Eq9VtPRRJ/Jf/j6y0xkW9C3/TQjZU:G6K5/up6nPBt09CvTQu

    Score
    1/10
    behavioral4

    • Target

      VenomRAT_v6.0.3/DevExpress.Data.Desktop.v22.1.dll

    • Size

      838KB

    • MD5

      e59c802bbbc1ebc554f3f7b6a3259ee1

    • SHA1

      fdb4fa99e15d6519f18f7afe972fb2b128c5caf4

    • SHA256

      d13e0c266cb9b98a911bbb87fd94cd9e5125e3bff93bb9b1032271e7507ef2f6

    • SHA512

      34aa13fd54fa262405e68c5f915192fe02b9d2c6560f36c5a5c93ec399407b47996e2d4ed88c22286cc6d578a4356353a9540a729684272611350c4665119e73

    • SSDEEP

      12288:XzcvADexPaUb6wZPYj8vtvrlecLHP2+jXSwatzuHkrYCX1TSahOr1LZKHVoiXw+E:D5DexdNZPYj8zecLv2+jCXVGsYs

    Score
    1/10
    behavioral5

    • Target

      VenomRAT_v6.0.3/DevExpress.Data.Desktop.v22.2.dll

    • Size

      912KB

    • MD5

      03c9a3454f296dba13b5d4a70c3f1504

    • SHA1

      0b19ead85b4775f44b488cd99623b7ae6515d0ca

    • SHA256

      d405116805f243c6852b06b70e9cfca68837a2eb918d53247c6ae69c21b093a2

    • SHA512

      a5c90806a68b6e1051a2d444a57ae216683ce42b419723fc1b9e29bf98149c7c9b2d7345e45cb3c76f57c7b8fd1cee7404c7c3ee7a39c4966db301c649ce30e2

    • SSDEEP

      24576:WkZ0Hy8pATSVJLTJ8esj+ye2L95PlYfBxgA9QphiP6sLDip:giGqesB+QpkP6s+

    Score
    1/10
    behavioral6

    • Target

      VenomRAT_v6.0.3/DevExpress.Data.v22.1.dll

    • Size

      5.0MB

    • MD5

      5c3017ec9073a7a4f3351440c3daaa8a

    • SHA1

      ee1f73f8618439fc8a42f38b32760367bd5ce6b5

    • SHA256

      e8d4940767c992e14acb77ba1140d5dac56683afe5096e1b08408b0767466e33

    • SHA512

      5d98631f754067e659400183134024cc2a4c22ba4a43ddf592791e01eca5cf1530eabcc4ee34beb7507c56dd02a80ba4704db389753a3119657e1d822c68c02a

    • SSDEEP

      49152:fJJHcStFUzQUnI8id8LDaWdFH6cvmhHgVYFvFWcp/ldRzaxO0zC96S1qBdFBWhRo:fJJH1gzh9iSLDCHgVYFvFXTda

    Score
    1/10
    behavioral7

    • Target

      VenomRAT_v6.0.3/DevExpress.Data.v22.2.dll

    • Size

      5.1MB

    • MD5

      972235bfefa9a46cf8c4f3461546822d

    • SHA1

      1207b99cf9c961d756607567b321a2e3da0fa4bf

    • SHA256

      02653d88be212ba3753ee8e87c13159a2ce48250c6c7a05f21091924eb6953d2

    • SHA512

      ad22e1a84ae11e132463b20453c0d482591cbfc923251c802a7ae4693f0475a043d1f03f411ecdcab015dd99914e63a1f9736680d91e6825bb4b53c0d30bcd03

    • SSDEEP

      98304:ZynaqG9bqBpIyn5f+byY7OCognQtqJnnC/wnnLs0mV52GFi8ajXXREyicBhydxbq:HXREyicBhsE

    Score
    1/10
    behavioral8

    • Target

      VenomRAT_v6.0.3/DevExpress.DataAccess.v22.2.UI.dll

    • Size

      1.1MB

    • MD5

      58d916af93509dd6242bb1a8480f1411

    • SHA1

      6c9be26a8b77c90df8b056828e2f0748e83fdb12

    • SHA256

      f8a4f0ce3e38e1e750ce84231423600dbda276ba561f1a3bfc0ca142c7bc502a

    • SHA512

      8be93d1131efed14fc3d1e788aeb639d2077cd8d664c269e4dd56836cda765bb663c67d6c17bbfb2262d9cd0041c5d2dddb6f27380b1f52e040db30bc8739a6d

    • SSDEEP

      12288:+1Bih715T8HAPj4LrUM+iTzbMUe7B+VBBDgipnI7fbPg2yEqWCpWw:Eih1Pj4H/FwjLeKqWvw

    Score
    1/10
    behavioral9

    • Target

      VenomRAT_v6.0.3/DevExpress.DataAccess.v22.2.dll

    • Size

      2.3MB

    • MD5

      0f8e092a39ea088e3d6290f49d45d882

    • SHA1

      c3da5608855a9059f9239a610ea5a126510bf026

    • SHA256

      2eac960681b6b3193945215060cb3b4e2b7483304566dbbe74a683e893c7e022

    • SHA512

      8df310efb3faed7e51d51a4ee52e96724a2a9f2903192fb6dd98910cfbc1b37dd23fe0afe6a2a6c449cc28d1552431addc63879bf26ea9cb3a95d2dfcfeb92e3

    • SSDEEP

      24576:EN+IqInpwDV0HS+0LODDUDaRR917/JjB5FJjzkt0GDKmlaBwJpDyRSa+Ya4FdY:EqPDdO0sjkOmlaBwJpDyRSWY

    Score
    1/10
    behavioral10

    • Target

      VenomRAT_v6.0.3/DevExpress.DataVisualization.v22.2.Core.dll

    • Size

      70KB

    • MD5

      22331e85e4541142c45e763572f53d34

    • SHA1

      f304bbfd451b2194d13fc537f398ce7c606f89b8

    • SHA256

      ec3b83363fc251a586c5520f3d617b3f1702ee92995dcd6e4c68e2f44e0896f7

    • SHA512

      773ad77b36f247b4d323f0fb831eb71f0177381a983cdd2882491d07210c2421244a9cdd43f942105a364cb07dd358a119e43deb17297ae0a440c7c288e8abd2

    • SSDEEP

      1536:/jQQ7SIR8UJLZTLJweZ7MeZDGr3IqLlCqnh8ItkPxa:LQQ7SC8QLZTWeZ7MUDGDIjdIt0xa

    Score
    1/10
    behavioral11

    • Target

      VenomRAT_v6.0.3/DevExpress.Diagram.v22.2.Core.dll

    • Size

      3.0MB

    • MD5

      e3d5b8cfe35aa677e887255b39689b36

    • SHA1

      5bfe506461c19e296d22c10e864390d4db117092

    • SHA256

      e971be0ba001e66a202c4486c1cfda6141fa9b62571ef00f9929f945e76229fd

    • SHA512

      92e011e92576d45e6e3a46634fbf55d4a0ef8e7c3656671fd135a7ef5c391977e812d86e6a4160626acf4f4592d6b0430af9a61cc54faba37f0774956c3bea0e

    • SSDEEP

      49152:kkd79qsLqsnV5OR6sgxzkmxdflHqkYoYmNpDlwb6GdYX2vYNWAOfraPH:w4scuYX2vYNWAOfraPH

    Score
    1/10
    behavioral12

    • Target

      VenomRAT_v6.0.3/DevExpress.Dialogs.v22.2.Core.dll

    • Size

      927KB

    • MD5

      b08df7e98f044fa024e8f2f21a8eaee1

    • SHA1

      46101821b2b4e41c08890c78f9f158478248b614

    • SHA256

      ee75eeabe9f077371a321077e0a6dd0a7b00d33794ff3b3b7210ac56a6b326eb

    • SHA512

      f12dedb1a36a964a5a57ce45c899eb50877d4ede21f2f48ace488e3ef57db51ea594461715034a58e3f4332b61c0c6b34f3c821e576f2917a411957d156c4db8

    • SSDEEP

      24576:wIxjKdIbP9b1vVfWsgNLZ/ZDTKq2lPOoeUzI:/WdIRb1JWBJ2lPOz

    Score
    1/10
    behavioral13

    • Target

      VenomRAT_v6.0.3/DevExpress.Drawing.v22.1.dll

    • Size

      291KB

    • MD5

      cb877cd3b77a37f8e279fe7dc6b4ba6a

    • SHA1

      a03989c1144a57e9088daa40f829a49298135b03

    • SHA256

      bc0d40dcdcc9f3e2e7b7071ffb033811bb094cc6a63907c994acd5415b577930

    • SHA512

      8dbbbe8606bd36c2efd4f456840c9cb5dd4966097f3a6a0e81104fe4a50695adf558612d74fd31978728455f699f6623e73dfd5e3fcd405e0afceebe83ddd97b

    • SSDEEP

      6144:4yeiVjwTvgD+Z6Rb3zaiG5lpvkw5zticHOmfvAbWqiWUvq:4yeiVjwTvX6NhclJiOfqiWgq

    Score
    1/10
    behavioral14

    • Target

      VenomRAT_v6.0.3/DevExpress.Drawing.v22.2.dll

    • Size

      598KB

    • MD5

      5ad5e45bded230824ea84eb8a941a11d

    • SHA1

      092db1158f73529a650faacf82e7b08f812d97cd

    • SHA256

      41b3baffaec9eed640cf10d917d3d912685001a7e3a963e2872c85a74d55100c

    • SHA512

      dc443cba6d278a2a3d913fbd0d66ce3ccb0e08eb0cb6f947097f57b860a714a13fc0c21c315b70ad58c97f95e19a331d065998cd873f7e0b5bbaf495e19f6e04

    • SSDEEP

      12288:lDEOmUDROBNifcvBLhHX0vLt8wkqPfdEM52x:AAKifcvnXCtnfdEM5g

    Score
    1/10
    behavioral15

    • Target

      VenomRAT_v6.0.3/DevExpress.Images.v22.1.dll

    • Size

      8.4MB

    • MD5

      5246e412b204882fed4300efede7119b

    • SHA1

      f688ca2ff1ee91f6dbe0b52502ff0e1154210787

    • SHA256

      67a7db033d6047d8345182233f6d314c3ff1547dccaf5b8c04d71e1c8d8faa57

    • SHA512

      d35d52e848915f25a502115791bd947ad2a6374e602348d173a74dddc7fce5d42bed62576a819454d5fafc2a120a69d6fc254ab940c4263c65b53804cb48d866

    • SSDEEP

      98304:nuhlxpyY1Fp6bPIPxk7Q8unttuszubxv1h:nyGI6bAPS7XuttZatD

    Score
    1/10
    behavioral16

    • Target

      VenomRAT_v6.0.3/DevExpress.Images.v22.2.dll

    • Size

      8.2MB

    • MD5

      58ab573a10017df4cd0aabc790711a64

    • SHA1

      a45f84e5b69768c9e0335f780e56a8e0f9003cdf

    • SHA256

      90d34d161ebadd1ebf75e4e10855635f8d5c83bac2829abdeebb6d082d9ce3ad

    • SHA512

      f954aa39d3ad8f68ec688cc9bac8e0b481f15e601af8dee8e6e18c0cd60cc6a0fc500f6cc1cb629e87e141982c12f1086011d383a025a22fa2ff416be639d0ae

    • SSDEEP

      98304:lDlxpyY1Fp6bPIPxk7Q8unttuszubxv1k:3GI6bAPS7XuttZaty

    Score
    1/10
    behavioral17

    • Target

      VenomRAT_v6.0.3/DevExpress.Mvvm.v22.2.dll

    • Size

      1.5MB

    • MD5

      1117ef703715898519a95ff4b3370fcb

    • SHA1

      117ebc2630c71270e0c3f1f96e98e53633e60bda

    • SHA256

      efdae289d4215896dca0b74a4084d17926693e7555807a1373d015f6dd1a3e65

    • SHA512

      d960cabf2f15a18975c7cfd4af74cfb1147950b8a76e0dce8a3105af302fd9c1ea560607f0287c574663f8eb3ce73e9b7bdc22ecd22046621040b162986b9f92

    • SSDEEP

      12288:ngvcM+TrE0e7uX/tkk2vkf5DbQKGevXnJMjEEk8v/5ZZ5TUgCPTaq:Z2QX/eklQKGev3JmEEk8v/5pUsq

    Score
    1/10
    behavioral18

    • Target

      VenomRAT_v6.0.3/DevExpress.Office.v22.1.Core.dll

    • Size

      3.7MB

    • MD5

      04481d41b4edffc33d43dc7b3c21879b

    • SHA1

      9bdfc1ae5bc61699e2705aa58e693ce745c35f88

    • SHA256

      10c2ef3e11a2a2cdac160d4299cd541d6b1f75613ae7adec7689e71d365f7e21

    • SHA512

      76e6a7326e06c3a57d056fb139cb655382017336b422b606a3237d472e7a443d59c71e08a060b3c84a9129d507e458a8f990fef872e5f6e7600f62bd5b02a59a

    • SSDEEP

      49152:3eqp7uMm3b6vbhMVlddimWL1S1wUwyWFN:3eqRTY1WL1S1wUwyWj

    Score
    1/10
    behavioral19

    • Target

      VenomRAT_v6.0.3/DevExpress.Office.v22.2.Core.dll

    • Size

      3.7MB

    • MD5

      f570b5c55a11bcacf973eeed57e0844e

    • SHA1

      f9fa8dbc1c8f7dc239d0b5c83aafdc54277c71c0

    • SHA256

      ff553a31694d7043aacbbcda3ec41377ddc036c506520db7331fe3ba8e3a39b6

    • SHA512

      e91969f0a723347d788897f6d5d13a979d61d9fb51c21387d1eb746fbc38cf88119dfb3b1ca565eed1676cc8428cc48eb9ed4fd9d834bfe0ddfd89b2d0faa28b

    • SSDEEP

      49152:1Hi6ec84Z7Qzu8guVlDdimWL1S1wUwyWFJ:JirrwUzB1WL1S1wUwyWz

    Score
    1/10
    behavioral20

    • Target

      VenomRAT_v6.0.3/DevExpress.Pdf.v22.1.Core.dll

    • Size

      5.1MB

    • MD5

      3da62d7c737ee74cd7c039ec47780794

    • SHA1

      d3403fc931204f1a6fcd731ca3d65be571bc29b0

    • SHA256

      0704e6abdd582e23b37a7bdfd298b914038e43477f2e0bc271b012185a5e71c4

    • SHA512

      f39d3145d45b2221c1da05eccf8ca97e5aadc476526f0639b87b4289053b196f8bd282d8373e96f0b09aabbeb120d85cfc1247d7503fd10a74824c22a93adcf0

    • SSDEEP

      98304:KX8B3YZ5K3AgwJhuwug6mDxLAqq8n7OH2Ck:KX8B3YZ5K3AgwuhUVzDn782h

    Score
    1/10
    behavioral21

    • Target

      VenomRAT_v6.0.3/DevExpress.Pdf.v22.1.Drawing.dll

    • Size

      502KB

    • MD5

      ba8bacdc0334943e942fcebb93c13378

    • SHA1

      7fdc8a6e619e21ec2c37aaa5e0caad031ba9392f

    • SHA256

      f98ad5274cc55f675c60a61d74a4d213a30c00e466537ee852d75c5f390ce7c3

    • SHA512

      e8b6f6801735a672959ac5d5067735bdcb447b0f4fcaf222fdafbf1623b733dbe30684a7f65c259d63e5ea77c04d5625c85770b1442f201d68ec8fd9711ebc79

    • SSDEEP

      6144:xaZV+AVlOt4JKqEucWN+AZbewWw6JpnlmEMBP6PuhMWU7ktJP7/ejvfJN85qybkd:YuAViWNNpWwGpwJ6PjW0kPC7SrY9

    Score
    1/10
    behavioral22

    • Target

      VenomRAT_v6.0.3/DevExpress.Pdf.v22.2.Core.dll

    • Size

      4.9MB

    • MD5

      babb2a7abc59c29d026cea7a4546e367

    • SHA1

      be6105d8a0fe90483725a70cab951895c8ea7121

    • SHA256

      084983a6412c967de89f28ab605197d42f682485ac73ac31e2ed1b28533cc63f

    • SHA512

      3d2cfad8c21eed7a64b7059fa2527da642f8067ae7678f977cb11edee21d725548bc9614897cee549ce0d56a3acf4977585c716dde650609d3500b102d68ee63

    • SSDEEP

      49152:5ohQrbI7lgo4X1CjWWRagLpTHr5ZnlgC1Jl5I63UxskL0H9qY+k1Iu64Q6mDxLAx:TrbmqJkqug6mDxLAqq8n7OH2CF

    Score
    1/10
    behavioral23

    • Target

      VenomRAT_v6.0.3/DevExpress.Pdf.v22.2.Drawing.dll

    • Size

      501KB

    • MD5

      0bcab7de0682bd86dce65e5f8b1c9800

    • SHA1

      a4696ebf4d72274b333ebd6c591f299cf8d6bfa4

    • SHA256

      a694db9952459b0d2de2a390a0def2607a56ffeefda17578cd944bdb312475c9

    • SHA512

      5f2b4bbb6d72a01ef4c0a2206b48b8ea2c2ce38a8efc717856a97d84d2243dacede14d5c92f88b7ec52955183d0600fe3fe238ee68d0ab4a9f609ed82cee60b7

    • SSDEEP

      6144:ocyLi04H7Uks+m0MX8jfvstOjEogcu3zhjVi6RMLnnMuME+HXMul0w0ehcyfuYOI:YLi0n+mufvshdVCLnMeul0WhVOoubK

    Score
    1/10
    behavioral24

    • Target

      VenomRAT_v6.0.3/Plugins/Keylogger.exe.config

    • Size

      161B

    • MD5

      8810b832f11b6e5a1afab929618059f2

    • SHA1

      5e198d58851231b69595a5800739f06b875cca3d

    • SHA256

      68cbb1295389a1bd6b830debfd0a8bb0a88bee2522304f5894c710912021194c

    • SHA512

      b7ff97e5be1a9585a53a570445f25070e2124f3a8d8eed760dc062ca41a9828dc7e3a53136faf68673cabedfc8512cc02333ec5556c62050232f9be8e8337b64

    Score
    1/10
    behavioral25

    • Target

      VenomRAT_v6.0.3/Plugins/Stealer.dll.config

    • Size

      1KB

    • MD5

      ee37d8dde7f969b007430b18386ef45f

    • SHA1

      5dadec5c0ef36d2511d9e4943ea5a59462a657ab

    • SHA256

      63837bde3bfb609d59002b88831786e7b0bf285a6090f9252c35af9ee3f75ff6

    • SHA512

      76bde199f18744451eca542084de6819c1033bd28495c5a458be242bc00b4b05027de6358965c2357772216ec7afa55ef459ebe7b9e48bc5bd8baa60ba1f9d21

    Score
    1/10
    behavioral26

    • Target

      VenomRAT_v6.0.3/Plugins/ip2region.db

    • Size

      8.9MB

    • MD5

      c8f4c82b2cbe02d7797dd6568533ae5a

    • SHA1

      92893bf95436d087b55ad3bc1ab6b8a349adc2d3

    • SHA256

      5948907df4a4782d5954499b65ab011e257fc5775f81e0b8b4dea6fa10e6fcc5

    • SHA512

      151ef56eb99cd29e02dd04b2dc19284597df2feedba1e1fbb6bbdf65f5f66fd2f9caffc48057ac1cb684270739ecddff6098b9b97b80ecfb98e277917f174c96

    • SSDEEP

      196608:ShLkNPFCZZwiJl1NLIsPA8fxvuIMzd/95UhS1nUzBPeXQtG:DP+Zw6NLIsFfskh1BmXGG

    Score
    3/10
    behavioral27

    • Target

      VenomRAT_v6.0.3/Resources.resx

    • Size

      17.1MB

    • MD5

      f5881e9cf9d84fc36268f71a8f496c6a

    • SHA1

      4e12b92b28cbfd4895da48a71f82a4848b926613

    • SHA256

      b00bb37106f449417db0d3d9e4e73d35755e89fa9ce94582b74612bad93cecce

    • SHA512

      0bce7d6e7a210744ff254ebdd6f792f85cd31c11a07d0581ff8c8722011d73a542b23e89dd628f3c1a19988ad145064af7a45acf0193f0a9c44d9bab0a81951d

    • SSDEEP

      49152:baQuFaQu+Aw2M3gzMVP56jtDLig9WRQZYnxNKQP60ot6DghhVD6R3Lr+SqMckGpC:i

    Score
    1/10
    behavioral28

    • Target

      VenomRAT_v6.0.3/Venom RAT + HVNC + Stealer + Grabber.exe.config

    • Size

      3KB

    • MD5

      a1c2a2870001b66db41bcb020bff1c2d

    • SHA1

      8c54c6a3564c8892aa9baa15573682e64f3659d9

    • SHA256

      0aa9e3ab5c88c5761120206eff5c6e35c90288290b3647a942059705ef5b75e5

    • SHA512

      b3bf53120203cfaa951f301b532849cb382d2404c9503916bc1ca39925a9a1530b01045f341fc75d47d65130d0187dcbbf4288b9ef46aa81624b59ba7802794b

    Score
    1/10
    behavioral29

    • Target

      VenomRAT_v6.0.3/VenomServer.p12

    • Size

      1KB

    • MD5

      65efef16af8b2bb993e24ca1fdb3f3a7

    • SHA1

      e205dcc888582eb51d0ee9690d37a7b75138f715

    • SHA256

      c40f74c79715de4c5265dffd643d7bd5dda2caa09ca84e620bc78f7d27df51fc

    • SHA512

      29581484c44849ccd0ad9bd2c9058fc56f3589019baf4b833a5fc8ceea0e488a357639c92cbaf977f74d5f2d59abb2b8ee7a607cdc67c6c14592b4bd9c3a5215

    Score
    5/10

    • Drops file in System32 directory

    behavioral30

    • Target

      VenomRAT_v6.0.3/offline

    • Size

      86KB

    • MD5

      829c84c8f69856aaba8dfad042bc1cf4

    • SHA1

      0c9e6169aa58542e60807405d12ac226888c282c

    • SHA256

      21b4173439bdcb6338d99a8f060b98426cca95b2830b62965a72c94bc6c77236

    • SHA512

      9a670fa71f795efe96bd61cad7e731ef9300e93c44b8109f89678b7db10bfebe386e694cdba28047c837d907ae73090252900ec0b315aa74509f826b3cf403ce

    • SSDEEP

      1536:QRRoZn71yIjszK7ugL1Fa6OdqZbDqmXOaWv8QsKSM8QwZIABlHp5:cRIT7ugxFzOdK+mXOaFQsKSzoI9j

    Score
    1/10
    behavioral31

    • Target

      VenomRAT_v6.0.3/online

    • Size

      88KB

    • MD5

      4e642f0d041d6ef79d7701e599e4bbe9

    • SHA1

      e82bf57ee1d78070506d08b16d79991ae2b069c0

    • SHA256

      c2cfbabf111d231fb2531b6c0759c5191fd91f767059790ff53aef87fab2280f

    • SHA512

      79064943187cf61fadfc315986c71cc500e21ee1f8b9e81c6978f4ae555fe492153ca7c727935004fd5b2f90b30f2c1d15bcc95cc25044e861e1309fdf4b4ca1

    • SSDEEP

      1536:NzrZcbrBsJy8ig8jPBlrUz+qIS8s/N1yg5ty0WwNHAzJvfvTyrzqAhlAeclHn36:NvZWOJp8PgIS8s11y4c0FAVHvTyrzbl1

    Score
    1/10
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

ratstormkittyasyncrat
Score
10/10

behavioral1

Score
7/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
3/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
5/10

behavioral31

Score
1/10

behavioral32

Score
1/10