General

  • Target

    VenomRAT v6.0.3 (SOURCE).7z

  • Size

    74.1MB

  • Sample

    241216-r9cccstpfj

  • MD5

    153a3ba01dbeb27125c3aca9a195e029

  • SHA1

    6a4dde6a149ec6ff4020d91024c6acf2a1b84f62

  • SHA256

    334b93afb2ddd91b0b8788990b3c43656cf2b952c666bfc17b25ea2162522fce

  • SHA512

    8f89cd78b3db194305e4cd2035824a4ba08733d9aff9902aa43c475be80ef46571ae1dca9376dd04ee0553f2d894b31e968a8e72a97920298b5c99201ef3a52d

  • SSDEEP

    1572864:PHSDs8PRRv43oLAECuoj2foALWhJXJODPuo/1YtmecRN3vAd45kY9dNik:fENBcntj2foSmXJODGotYMNtvAdiNnik

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

Default

C2

95.216.52.21:7575

Mutex

xdnqiaxygefjfoolgo

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain
1
9qMAKEcHjR7M51oiubg1s8nBGFZNF42Z

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

127.0.0.1:4449

Mutex

qzwnmervrwfc

Attributes
  • delay

    1

  • install

    true

  • install_file

    servee.exe

  • install_folder

    %AppData%

aes.plain
1
hJlmUrDLtvTSAT7pRgPb5nSM47Luhmxc

Targets

    • Target

      VenomRAT v6.0.3 (SOURCE)/BouncyCastle.Crypto.dll

    • Size

      2.5MB

    • MD5

      f0b3e112ce4807a28e2b5d66a840ed7f

    • SHA1

      54a6743781fd4ceb720331fce92f16186931192d

    • SHA256

      333903c7d22a27098e45fc64b77a264aa220605cfbd3e329c200d7e4b42c881c

    • SHA512

      dc8ec9754c5e86f7e54e75ff3e5859c1b057f90e9c41788037b944a5db2cb3b70060763d0efcbe55ec595bcc47a9c0ff847a4876821470ca1659c31afd5b0190

    • SSDEEP

      49152:OSSJ+G1PjodumkjD6Oc0mqHZwueCtbu9kQN:6xodumo6Lr

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Async RAT payload

    • Downloads MZ/PE file

    • A potential corporate email address has been identified in the URL: opera__gx--hero-bottom@2x.d36fa6357026.png

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Legitimate hosting services abused for malware hosting/C2

    • Target

      VenomRAT v6.0.3 (SOURCE)/Client.exe

    • Size

      66KB

    • MD5

      3935ef8202cd8040741138a14b0655f0

    • SHA1

      54cf02cf472111b57ac5329a408b2f858e2f3b86

    • SHA256

      3a7efdc3d85adf7a5484ef17549db47be2a78b4b6892d93dd91958bb9a9edb82

    • SHA512

      cbc24bde07ec9d1372869ce697ba3fcc76a7be2b75122af1f283160551dfc2dd18f77bc24ed0fff37b49dc7c8b0ffd41001f238595bec0c4761a5f4a79ec5ff1

    • SSDEEP

      1536:0vWMO7xoQlzh4fZF9O8QQHFkYlTwVsbbXA/a2s9TDZVclN:HoR9O8QQHFk1sbbXh2sNzY

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Target

      VenomRAT v6.0.3 (SOURCE)/DevExpress.Charts.v22.2.Core.dll

    • Size

      1023KB

    • MD5

      bcfa59a0896b924b2d8f1a50d4a1d970

    • SHA1

      5f0ad9f59f852023d5a1d3377bdf45ec2b45b52a

    • SHA256

      de682a0d612ec7d45a0accd8fbbb90db374d652ec68b52317170082a2afe7f31

    • SHA512

      604f26842788e851822915bb9e80ca2af392b8e82ae4cffa0160cc761303098795615e00356665117b4ee1be421d74d46b8ca13bca220bd97f04f7b575a5f4d3

    • SSDEEP

      12288:bBj6U3pbVIy5rPW9s9d9r6AXe2w8jnHXRM1bnMLdvzL2bpujxZZyNdqTfFlL31XA:Fj3f6Mw8jnHXQe7S0yWTfFJQMXn3AL

    Score
    1/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/DevExpress.CodeParser.v22.2.dll

    • Size

      1.7MB

    • MD5

      ec3a80bc6de2d32444c582f31c14000f

    • SHA1

      e4d880a4845095b18cc13b98d2d8f46d2c894a36

    • SHA256

      aa74c8d4b98543a9f277860c7d11a64d762b4dd20d93acdbe0e4193fb69d5245

    • SHA512

      7b469292db8fdb315a0647a060e28f6d2a5ff9fce81e4a5d8db9438b28fec7144b9ab02177fe8cb4bf7a54c407c8dca9dbfed437e8f0b71ead1bab2043b90eef

    • SSDEEP

      24576:O2pK1qXadH/E7i39l5/uwPSs/Eq9VtPRRJ/Jf/j6y0xkW9C3/TQjZU:G6K5/up6nPBt09CvTQu

    Score
    1/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/DevExpress.Data.Desktop.v22.1.dll

    • Size

      838KB

    • MD5

      e59c802bbbc1ebc554f3f7b6a3259ee1

    • SHA1

      fdb4fa99e15d6519f18f7afe972fb2b128c5caf4

    • SHA256

      d13e0c266cb9b98a911bbb87fd94cd9e5125e3bff93bb9b1032271e7507ef2f6

    • SHA512

      34aa13fd54fa262405e68c5f915192fe02b9d2c6560f36c5a5c93ec399407b47996e2d4ed88c22286cc6d578a4356353a9540a729684272611350c4665119e73

    • SSDEEP

      12288:XzcvADexPaUb6wZPYj8vtvrlecLHP2+jXSwatzuHkrYCX1TSahOr1LZKHVoiXw+E:D5DexdNZPYj8zecLv2+jCXVGsYs

    Score
    1/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/DevExpress.Data.Desktop.v22.2.dll

    • Size

      912KB

    • MD5

      03c9a3454f296dba13b5d4a70c3f1504

    • SHA1

      0b19ead85b4775f44b488cd99623b7ae6515d0ca

    • SHA256

      d405116805f243c6852b06b70e9cfca68837a2eb918d53247c6ae69c21b093a2

    • SHA512

      a5c90806a68b6e1051a2d444a57ae216683ce42b419723fc1b9e29bf98149c7c9b2d7345e45cb3c76f57c7b8fd1cee7404c7c3ee7a39c4966db301c649ce30e2

    • SSDEEP

      24576:WkZ0Hy8pATSVJLTJ8esj+ye2L95PlYfBxgA9QphiP6sLDip:giGqesB+QpkP6s+

    Score
    1/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/DevExpress.Data.v22.1.dll

    • Size

      5.0MB

    • MD5

      5c3017ec9073a7a4f3351440c3daaa8a

    • SHA1

      ee1f73f8618439fc8a42f38b32760367bd5ce6b5

    • SHA256

      e8d4940767c992e14acb77ba1140d5dac56683afe5096e1b08408b0767466e33

    • SHA512

      5d98631f754067e659400183134024cc2a4c22ba4a43ddf592791e01eca5cf1530eabcc4ee34beb7507c56dd02a80ba4704db389753a3119657e1d822c68c02a

    • SSDEEP

      49152:fJJHcStFUzQUnI8id8LDaWdFH6cvmhHgVYFvFWcp/ldRzaxO0zC96S1qBdFBWhRo:fJJH1gzh9iSLDCHgVYFvFXTda

    Score
    1/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/DevExpress.Data.v22.2.dll

    • Size

      5.1MB

    • MD5

      972235bfefa9a46cf8c4f3461546822d

    • SHA1

      1207b99cf9c961d756607567b321a2e3da0fa4bf

    • SHA256

      02653d88be212ba3753ee8e87c13159a2ce48250c6c7a05f21091924eb6953d2

    • SHA512

      ad22e1a84ae11e132463b20453c0d482591cbfc923251c802a7ae4693f0475a043d1f03f411ecdcab015dd99914e63a1f9736680d91e6825bb4b53c0d30bcd03

    • SSDEEP

      98304:ZynaqG9bqBpIyn5f+byY7OCognQtqJnnC/wnnLs0mV52GFi8ajXXREyicBhydxbq:HXREyicBhsE

    Score
    1/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/DevExpress.DataAccess.v22.2.UI.dll

    • Size

      1.1MB

    • MD5

      58d916af93509dd6242bb1a8480f1411

    • SHA1

      6c9be26a8b77c90df8b056828e2f0748e83fdb12

    • SHA256

      f8a4f0ce3e38e1e750ce84231423600dbda276ba561f1a3bfc0ca142c7bc502a

    • SHA512

      8be93d1131efed14fc3d1e788aeb639d2077cd8d664c269e4dd56836cda765bb663c67d6c17bbfb2262d9cd0041c5d2dddb6f27380b1f52e040db30bc8739a6d

    • SSDEEP

      12288:+1Bih715T8HAPj4LrUM+iTzbMUe7B+VBBDgipnI7fbPg2yEqWCpWw:Eih1Pj4H/FwjLeKqWvw

    Score
    1/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/DevExpress.DataAccess.v22.2.dll

    • Size

      2.3MB

    • MD5

      0f8e092a39ea088e3d6290f49d45d882

    • SHA1

      c3da5608855a9059f9239a610ea5a126510bf026

    • SHA256

      2eac960681b6b3193945215060cb3b4e2b7483304566dbbe74a683e893c7e022

    • SHA512

      8df310efb3faed7e51d51a4ee52e96724a2a9f2903192fb6dd98910cfbc1b37dd23fe0afe6a2a6c449cc28d1552431addc63879bf26ea9cb3a95d2dfcfeb92e3

    • SSDEEP

      24576:EN+IqInpwDV0HS+0LODDUDaRR917/JjB5FJjzkt0GDKmlaBwJpDyRSa+Ya4FdY:EqPDdO0sjkOmlaBwJpDyRSWY

    Score
    1/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/DevExpress.DataVisualization.v22.2.Core.dll

    • Size

      70KB

    • MD5

      22331e85e4541142c45e763572f53d34

    • SHA1

      f304bbfd451b2194d13fc537f398ce7c606f89b8

    • SHA256

      ec3b83363fc251a586c5520f3d617b3f1702ee92995dcd6e4c68e2f44e0896f7

    • SHA512

      773ad77b36f247b4d323f0fb831eb71f0177381a983cdd2882491d07210c2421244a9cdd43f942105a364cb07dd358a119e43deb17297ae0a440c7c288e8abd2

    • SSDEEP

      1536:/jQQ7SIR8UJLZTLJweZ7MeZDGr3IqLlCqnh8ItkPxa:LQQ7SC8QLZTWeZ7MUDGDIjdIt0xa

    Score
    1/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/DevExpress.Diagram.v22.2.Core.dll

    • Size

      3.0MB

    • MD5

      e3d5b8cfe35aa677e887255b39689b36

    • SHA1

      5bfe506461c19e296d22c10e864390d4db117092

    • SHA256

      e971be0ba001e66a202c4486c1cfda6141fa9b62571ef00f9929f945e76229fd

    • SHA512

      92e011e92576d45e6e3a46634fbf55d4a0ef8e7c3656671fd135a7ef5c391977e812d86e6a4160626acf4f4592d6b0430af9a61cc54faba37f0774956c3bea0e

    • SSDEEP

      49152:kkd79qsLqsnV5OR6sgxzkmxdflHqkYoYmNpDlwb6GdYX2vYNWAOfraPH:w4scuYX2vYNWAOfraPH

    Score
    1/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/DevExpress.Dialogs.v22.2.Core.dll

    • Size

      927KB

    • MD5

      b08df7e98f044fa024e8f2f21a8eaee1

    • SHA1

      46101821b2b4e41c08890c78f9f158478248b614

    • SHA256

      ee75eeabe9f077371a321077e0a6dd0a7b00d33794ff3b3b7210ac56a6b326eb

    • SHA512

      f12dedb1a36a964a5a57ce45c899eb50877d4ede21f2f48ace488e3ef57db51ea594461715034a58e3f4332b61c0c6b34f3c821e576f2917a411957d156c4db8

    • SSDEEP

      24576:wIxjKdIbP9b1vVfWsgNLZ/ZDTKq2lPOoeUzI:/WdIRb1JWBJ2lPOz

    Score
    1/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/DevExpress.Drawing.v22.1.dll

    • Size

      291KB

    • MD5

      cb877cd3b77a37f8e279fe7dc6b4ba6a

    • SHA1

      a03989c1144a57e9088daa40f829a49298135b03

    • SHA256

      bc0d40dcdcc9f3e2e7b7071ffb033811bb094cc6a63907c994acd5415b577930

    • SHA512

      8dbbbe8606bd36c2efd4f456840c9cb5dd4966097f3a6a0e81104fe4a50695adf558612d74fd31978728455f699f6623e73dfd5e3fcd405e0afceebe83ddd97b

    • SSDEEP

      6144:4yeiVjwTvgD+Z6Rb3zaiG5lpvkw5zticHOmfvAbWqiWUvq:4yeiVjwTvX6NhclJiOfqiWgq

    Score
    1/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/DevExpress.Drawing.v22.2.dll

    • Size

      598KB

    • MD5

      5ad5e45bded230824ea84eb8a941a11d

    • SHA1

      092db1158f73529a650faacf82e7b08f812d97cd

    • SHA256

      41b3baffaec9eed640cf10d917d3d912685001a7e3a963e2872c85a74d55100c

    • SHA512

      dc443cba6d278a2a3d913fbd0d66ce3ccb0e08eb0cb6f947097f57b860a714a13fc0c21c315b70ad58c97f95e19a331d065998cd873f7e0b5bbaf495e19f6e04

    • SSDEEP

      12288:lDEOmUDROBNifcvBLhHX0vLt8wkqPfdEM52x:AAKifcvnXCtnfdEM5g

    Score
    1/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/DevExpress.Images.v22.1.dll

    • Size

      8.4MB

    • MD5

      5246e412b204882fed4300efede7119b

    • SHA1

      f688ca2ff1ee91f6dbe0b52502ff0e1154210787

    • SHA256

      67a7db033d6047d8345182233f6d314c3ff1547dccaf5b8c04d71e1c8d8faa57

    • SHA512

      d35d52e848915f25a502115791bd947ad2a6374e602348d173a74dddc7fce5d42bed62576a819454d5fafc2a120a69d6fc254ab940c4263c65b53804cb48d866

    • SSDEEP

      98304:nuhlxpyY1Fp6bPIPxk7Q8unttuszubxv1h:nyGI6bAPS7XuttZatD

    Score
    1/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/DevExpress.Images.v22.2.dll

    • Size

      8.2MB

    • MD5

      58ab573a10017df4cd0aabc790711a64

    • SHA1

      a45f84e5b69768c9e0335f780e56a8e0f9003cdf

    • SHA256

      90d34d161ebadd1ebf75e4e10855635f8d5c83bac2829abdeebb6d082d9ce3ad

    • SHA512

      f954aa39d3ad8f68ec688cc9bac8e0b481f15e601af8dee8e6e18c0cd60cc6a0fc500f6cc1cb629e87e141982c12f1086011d383a025a22fa2ff416be639d0ae

    • SSDEEP

      98304:lDlxpyY1Fp6bPIPxk7Q8unttuszubxv1k:3GI6bAPS7XuttZaty

    Score
    1/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/DevExpress.Mvvm.v22.2.dll

    • Size

      1.5MB

    • MD5

      1117ef703715898519a95ff4b3370fcb

    • SHA1

      117ebc2630c71270e0c3f1f96e98e53633e60bda

    • SHA256

      efdae289d4215896dca0b74a4084d17926693e7555807a1373d015f6dd1a3e65

    • SHA512

      d960cabf2f15a18975c7cfd4af74cfb1147950b8a76e0dce8a3105af302fd9c1ea560607f0287c574663f8eb3ce73e9b7bdc22ecd22046621040b162986b9f92

    • SSDEEP

      12288:ngvcM+TrE0e7uX/tkk2vkf5DbQKGevXnJMjEEk8v/5ZZ5TUgCPTaq:Z2QX/eklQKGev3JmEEk8v/5pUsq

    Score
    1/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/DevExpress.Office.v22.1.Core.dll

    • Size

      3.7MB

    • MD5

      04481d41b4edffc33d43dc7b3c21879b

    • SHA1

      9bdfc1ae5bc61699e2705aa58e693ce745c35f88

    • SHA256

      10c2ef3e11a2a2cdac160d4299cd541d6b1f75613ae7adec7689e71d365f7e21

    • SHA512

      76e6a7326e06c3a57d056fb139cb655382017336b422b606a3237d472e7a443d59c71e08a060b3c84a9129d507e458a8f990fef872e5f6e7600f62bd5b02a59a

    • SSDEEP

      49152:3eqp7uMm3b6vbhMVlddimWL1S1wUwyWFN:3eqRTY1WL1S1wUwyWj

    Score
    1/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/DevExpress.Office.v22.2.Core.dll

    • Size

      3.7MB

    • MD5

      f570b5c55a11bcacf973eeed57e0844e

    • SHA1

      f9fa8dbc1c8f7dc239d0b5c83aafdc54277c71c0

    • SHA256

      ff553a31694d7043aacbbcda3ec41377ddc036c506520db7331fe3ba8e3a39b6

    • SHA512

      e91969f0a723347d788897f6d5d13a979d61d9fb51c21387d1eb746fbc38cf88119dfb3b1ca565eed1676cc8428cc48eb9ed4fd9d834bfe0ddfd89b2d0faa28b

    • SSDEEP

      49152:1Hi6ec84Z7Qzu8guVlDdimWL1S1wUwyWFJ:JirrwUzB1WL1S1wUwyWz

    Score
    1/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/DevExpress.Pdf.v22.1.Core.dll

    • Size

      5.1MB

    • MD5

      3da62d7c737ee74cd7c039ec47780794

    • SHA1

      d3403fc931204f1a6fcd731ca3d65be571bc29b0

    • SHA256

      0704e6abdd582e23b37a7bdfd298b914038e43477f2e0bc271b012185a5e71c4

    • SHA512

      f39d3145d45b2221c1da05eccf8ca97e5aadc476526f0639b87b4289053b196f8bd282d8373e96f0b09aabbeb120d85cfc1247d7503fd10a74824c22a93adcf0

    • SSDEEP

      98304:KX8B3YZ5K3AgwJhuwug6mDxLAqq8n7OH2Ck:KX8B3YZ5K3AgwuhUVzDn782h

    Score
    1/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/DevExpress.Pdf.v22.1.Drawing.dll

    • Size

      502KB

    • MD5

      ba8bacdc0334943e942fcebb93c13378

    • SHA1

      7fdc8a6e619e21ec2c37aaa5e0caad031ba9392f

    • SHA256

      f98ad5274cc55f675c60a61d74a4d213a30c00e466537ee852d75c5f390ce7c3

    • SHA512

      e8b6f6801735a672959ac5d5067735bdcb447b0f4fcaf222fdafbf1623b733dbe30684a7f65c259d63e5ea77c04d5625c85770b1442f201d68ec8fd9711ebc79

    • SSDEEP

      6144:xaZV+AVlOt4JKqEucWN+AZbewWw6JpnlmEMBP6PuhMWU7ktJP7/ejvfJN85qybkd:YuAViWNNpWwGpwJ6PjW0kPC7SrY9

    Score
    1/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/DevExpress.Pdf.v22.2.Core.dll

    • Size

      4.9MB

    • MD5

      babb2a7abc59c29d026cea7a4546e367

    • SHA1

      be6105d8a0fe90483725a70cab951895c8ea7121

    • SHA256

      084983a6412c967de89f28ab605197d42f682485ac73ac31e2ed1b28533cc63f

    • SHA512

      3d2cfad8c21eed7a64b7059fa2527da642f8067ae7678f977cb11edee21d725548bc9614897cee549ce0d56a3acf4977585c716dde650609d3500b102d68ee63

    • SSDEEP

      49152:5ohQrbI7lgo4X1CjWWRagLpTHr5ZnlgC1Jl5I63UxskL0H9qY+k1Iu64Q6mDxLAx:TrbmqJkqug6mDxLAqq8n7OH2CF

    Score
    1/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/DevExpress.Pdf.v22.2.Drawing.dll

    • Size

      501KB

    • MD5

      0bcab7de0682bd86dce65e5f8b1c9800

    • SHA1

      a4696ebf4d72274b333ebd6c591f299cf8d6bfa4

    • SHA256

      a694db9952459b0d2de2a390a0def2607a56ffeefda17578cd944bdb312475c9

    • SHA512

      5f2b4bbb6d72a01ef4c0a2206b48b8ea2c2ce38a8efc717856a97d84d2243dacede14d5c92f88b7ec52955183d0600fe3fe238ee68d0ab4a9f609ed82cee60b7

    • SSDEEP

      6144:ocyLi04H7Uks+m0MX8jfvstOjEogcu3zhjVi6RMLnnMuME+HXMul0w0ehcyfuYOI:YLi0n+mufvshdVCLnMeul0WhVOoubK

    Score
    1/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/DevExpress.PivotGrid.v22.2.Core.dll

    • Size

      3.6MB

    • MD5

      436c0f4c5641573963083c22b538347f

    • SHA1

      b43803120b4f0be04a63ec34a64523e1c4e4269f

    • SHA256

      0a5a09245a3c18574de1797547b8685f596ceccf627cf7e530b9b8cb1e43011d

    • SHA512

      47cc11081cc176fce26aba5d91a2b0466f5764b548beb9f1c625541816600756c427c2d030c47135ee4a890397570a7649b04d917ce55dcb1842e414b29f4b17

    • SSDEEP

      24576:reTWk+n6AKdrqvX+xF1pKvHtS4ZcnMx+i4SXY9B5yzMKzstw54oylwyKsCgMm0I4:6Ri65FLc8UnkL90H2oWtVgCBvhiBZ9

    Score
    1/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/Source Code/Handle_Packet/HandleStealer.cs

    • Size

      1KB

    • MD5

      e2b5359cc734813e61fc56e969ac3612

    • SHA1

      9573736fb5180d7274a3cb16450af973adf634e7

    • SHA256

      980fc7ca1a940ab862c4d34ae46d6f8dbd28c7a28b9ac0f0be7dc5015debad45

    • SHA512

      a8d457b43737f5112e3f9988d6086eb09d88300e4d5c51fb36861eb8a12aca56b98455ef25918f37e4ca1f5b470e92e067ec527f1494d63bd97377c24db967ab

    Score
    3/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/Source Code/Helper/HexEditor/HexEditor.cs

    • Size

      21KB

    • MD5

      cd18a43b44249988a5711881c01f9b67

    • SHA1

      d90f8a311f418de9fde16780156af2f131e49d4e

    • SHA256

      b2eedb670df92310be95b39db447e4d4f13c0c14f87074559111f70436eea686

    • SHA512

      811a010a8363da708be918f618b795e35fd60ad0181f5748ad377393d5ad995904884af46eba2e3a0db3edbc0dd036893f777821bcb0f2f4f63eeedd8d8c8890

    • SSDEEP

      384:YfdtGsfO7mUSEWu8TmaAj7vDZT5G/8nJhikPneNANmyj2whM43EFtM0FHr5oCrhE:kMsfO7mUSEWu8TmaAj7vDZtuehikPneA

    Score
    1/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/Source Code/Helper/RegistryKeyHelper.cs

    • Size

      3KB

    • MD5

      e899b2e55a077821b065d7c37b69be73

    • SHA1

      576b724dac36426c45e8fbc185c3defb6fd8da5b

    • SHA256

      43e55b01c8ab6f7076e0846daf9f2174bd1ec1f2c49df862ed093b94c71cd80f

    • SHA512

      ee3a81eaacc5d321e68f15935dcacb1552afe8955cf0230ae9bf5eba8450b2079263968dd70bdee5d68c1bd617060cabdbeca619ecce281f3f0b6bb7fca9a6d3

    Score
    3/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/Source Code/Helper/RegistrySeeker.cs

    • Size

      4KB

    • MD5

      371e883334ed081f5460aa48ae81b008

    • SHA1

      c066a4d4b60bf8f09795e642cda63d3b55b83a6d

    • SHA256

      2c4428d31b57758446407ce3d0dcb3c9b45578f9f3c0eace03d3e85572deb9c7

    • SHA512

      eb7e3c65d7610977b6042be8728fab91132e823c2e4ac2fddb1963c9c07c0c18e3b97e7d8e12f0601db3a1ca2548d6cb49b513e30c1105e83dbf9987ee7f8deb

    • SSDEEP

      96:Co4s1yywfRFSnBrJ/FGjUU+W/BfrjiybIVXsYed8QngXZMkgLasSedSQSgSZ0mLK:Yy0ZErJtGjIW/BfrjigtjbgpMkgz1VfX

    Score
    3/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/Source Code/Helper/RegistryValueLstItem.cs

    • Size

      1KB

    • MD5

      93ecf2ea2be1b8c42bde29af788a3c19

    • SHA1

      4dcf98304df2e7090a9e99be30e5d1104d35bfd8

    • SHA256

      5b6232cb07d873994b186eb29c2a671c4574d85fb741eb3425edc8b95947bcad

    • SHA512

      b3d35d91131e9f1150a8bc08a9df00d0baa2517b390d247553521b0f90d5df5c91e5098fc010e3d86c707fd1b4a58734cc8c4e159f70e68311070dbd57ff0f8d

    Score
    1/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/Source Code/Helper/TelegramNotify.cs

    • Size

      561B

    • MD5

      e8f7ac632a0e55aaf483454657f9ed94

    • SHA1

      1df19ca081b342596810e916d17109c682ba8e1f

    • SHA256

      7743c6e53e9201b9014d7b7302e258f2cc2421c440c43f2b2c40f51f9a1bea5f

    • SHA512

      b1174a888d8b7dea247db39f1a68a02a1bd4543dc60fb65f432b4d5eda8c7d22df04dab098ff06fc7051b031ac20115a618f51c043a940337843bddb0583e28f

    Score
    3/10
    • Target

      VenomRAT v6.0.3 (SOURCE)/Source Code/StreamLibrary/IUnsafeCodec.cs

    • Size

      1KB

    • MD5

      3c8b1c3fc619354a0f5c562debd50912

    • SHA1

      e2dc929102d96381981d54ba9f0a3f0c544720b5

    • SHA256

      fe7a5cf6c9da269cddc00536cfee40e7aaddab8558602db37e2c2bec64eb310a

    • SHA512

      5d5f8ac2d3d4b51511877dad9652b5c2a108ec8c1cb28dd6a3b102c359aeae68d34ccfdd10b73dbd404eb8a994a3a470f1c808f3d8cd249388dfe61c98e619ea

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks

static1

ratdefaultasyncratstormkitty
Score
10/10

behavioral1

asyncratdefaultdefense_evasiondiscoverypersistencephishingprivilege_escalationrat
Score
10/10

behavioral2

asyncratdefaultrat
Score
10/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

execution
Score
3/10

behavioral27

Score
1/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

Score
1/10

behavioral31

execution
Score
3/10

behavioral32

Score
1/10

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.