334b93afb2ddd91b0b8788990b3c43656cf2b952c666bfc17b25ea2162522fce

Submit
Reports

Overview

overview

Static

static

VenomRAT v...to.dll

windows10-ltsc 2021-x64

VenomRAT v...nt.exe

windows10-ltsc 2021-x64

VenomRAT v...re.dll

windows10-ltsc 2021-x64

VenomRAT v....2.dll

windows10-ltsc 2021-x64

VenomRAT v....1.dll

windows10-ltsc 2021-x64

VenomRAT v....2.dll

windows10-ltsc 2021-x64

VenomRAT v....1.dll

windows10-ltsc 2021-x64

VenomRAT v....2.dll

windows10-ltsc 2021-x64

VenomRAT v...UI.dll

windows10-ltsc 2021-x64

VenomRAT v....2.dll

windows10-ltsc 2021-x64

VenomRAT v...re.dll

windows10-ltsc 2021-x64

VenomRAT v...re.dll

windows10-ltsc 2021-x64

VenomRAT v...re.dll

windows10-ltsc 2021-x64

VenomRAT v....1.dll

windows10-ltsc 2021-x64

VenomRAT v....2.dll

windows10-ltsc 2021-x64

VenomRAT v....1.dll

windows10-ltsc 2021-x64

VenomRAT v....2.dll

windows10-ltsc 2021-x64

VenomRAT v....2.dll

windows10-ltsc 2021-x64

VenomRAT v...re.dll

windows10-ltsc 2021-x64

VenomRAT v...re.dll

windows10-ltsc 2021-x64

VenomRAT v...re.dll

windows10-ltsc 2021-x64

VenomRAT v...ng.dll

windows10-ltsc 2021-x64

VenomRAT v...re.dll

windows10-ltsc 2021-x64

VenomRAT v...ng.dll

windows10-ltsc 2021-x64

VenomRAT v...re.dll

windows10-ltsc 2021-x64

VenomRAT v...ler.js

windows10-ltsc 2021-x64

VenomRAT v...or.vbs

windows10-ltsc 2021-x64

VenomRAT v...per.js

windows10-ltsc 2021-x64

VenomRAT v...ker.js

windows10-ltsc 2021-x64

VenomRAT v...em.vbs

windows10-ltsc 2021-x64

VenomRAT v...ify.js

windows10-ltsc 2021-x64

VenomRAT v...ec.vbs

windows10-ltsc 2021-x64

Analysis

max time kernel
147s
max time network
157s
platform
windows10-ltsc 2021_x64
resource
win10ltsc2021-20241211-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20241211-enlocale:en-usos:windows10-ltsc 2021-x64system
submitted
16-12-2024 14:53

Sharing

Copy URL

Twitter E-mail

Static task

static1

5 signatures

Behavioral task

behavioral1

Sample

VenomRAT v6.0.3 (SOURCE)/BouncyCastle.Crypto.dll

Resource

win10ltsc2021-20241211-en

asyncrat default defense_evasion discovery persistence phishing privilege_escalation rat

windows10-ltsc 2021-x64

28 signatures

150 seconds

Behavioral task

behavioral2

Sample

VenomRAT v6.0.3 (SOURCE)/Client.exe

Resource

win10ltsc2021-20241023-en

asyncrat default rat

windows10-ltsc 2021-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

VenomRAT v6.0.3 (SOURCE)/DevExpress.Charts.v22.2.Core.dll

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

VenomRAT v6.0.3 (SOURCE)/DevExpress.CodeParser.v22.2.dll

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

VenomRAT v6.0.3 (SOURCE)/DevExpress.Data.Desktop.v22.1.dll

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

VenomRAT v6.0.3 (SOURCE)/DevExpress.Data.Desktop.v22.2.dll

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

VenomRAT v6.0.3 (SOURCE)/DevExpress.Data.v22.1.dll

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

VenomRAT v6.0.3 (SOURCE)/DevExpress.Data.v22.2.dll

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

VenomRAT v6.0.3 (SOURCE)/DevExpress.DataAccess.v22.2.UI.dll

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

VenomRAT v6.0.3 (SOURCE)/DevExpress.DataAccess.v22.2.dll

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

VenomRAT v6.0.3 (SOURCE)/DevExpress.DataVisualization.v22.2.Core.dll

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

VenomRAT v6.0.3 (SOURCE)/DevExpress.Diagram.v22.2.Core.dll

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

VenomRAT v6.0.3 (SOURCE)/DevExpress.Dialogs.v22.2.Core.dll

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

VenomRAT v6.0.3 (SOURCE)/DevExpress.Drawing.v22.1.dll

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

VenomRAT v6.0.3 (SOURCE)/DevExpress.Drawing.v22.2.dll

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

VenomRAT v6.0.3 (SOURCE)/DevExpress.Images.v22.1.dll

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

VenomRAT v6.0.3 (SOURCE)/DevExpress.Images.v22.2.dll

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

VenomRAT v6.0.3 (SOURCE)/DevExpress.Mvvm.v22.2.dll

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

VenomRAT v6.0.3 (SOURCE)/DevExpress.Office.v22.1.Core.dll

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

VenomRAT v6.0.3 (SOURCE)/DevExpress.Office.v22.2.Core.dll

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

VenomRAT v6.0.3 (SOURCE)/DevExpress.Pdf.v22.1.Core.dll

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

VenomRAT v6.0.3 (SOURCE)/DevExpress.Pdf.v22.1.Drawing.dll

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

VenomRAT v6.0.3 (SOURCE)/DevExpress.Pdf.v22.2.Core.dll

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

VenomRAT v6.0.3 (SOURCE)/DevExpress.Pdf.v22.2.Drawing.dll

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

VenomRAT v6.0.3 (SOURCE)/DevExpress.PivotGrid.v22.2.Core.dll

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

VenomRAT v6.0.3 (SOURCE)/Source Code/Handle_Packet/HandleStealer.js

Resource

win10ltsc2021-20241211-en

execution

windows10-ltsc 2021-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

VenomRAT v6.0.3 (SOURCE)/Source Code/Helper/HexEditor/HexEditor.vbs

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

VenomRAT v6.0.3 (SOURCE)/Source Code/Helper/RegistryKeyHelper.js

Resource

win10ltsc2021-20241211-en

execution

windows10-ltsc 2021-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

VenomRAT v6.0.3 (SOURCE)/Source Code/Helper/RegistrySeeker.js

Resource

win10ltsc2021-20241211-en

execution

windows10-ltsc 2021-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

VenomRAT v6.0.3 (SOURCE)/Source Code/Helper/RegistryValueLstItem.vbs

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

VenomRAT v6.0.3 (SOURCE)/Source Code/Helper/TelegramNotify.js

Resource

win10ltsc2021-20241211-en

execution

windows10-ltsc 2021-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

VenomRAT v6.0.3 (SOURCE)/Source Code/StreamLibrary/IUnsafeCodec.vbs

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

VenomRAT v6.0.3 (SOURCE)/DevExpress.Pdf.v22.2.Drawing.dll
Size

501KB
MD5

0bcab7de0682bd86dce65e5f8b1c9800
SHA1

a4696ebf4d72274b333ebd6c591f299cf8d6bfa4
SHA256

a694db9952459b0d2de2a390a0def2607a56ffeefda17578cd944bdb312475c9
SHA512

5f2b4bbb6d72a01ef4c0a2206b48b8ea2c2ce38a8efc717856a97d84d2243dacede14d5c92f88b7ec52955183d0600fe3fe238ee68d0ab4a9f609ed82cee60b7
SSDEEP

6144:ocyLi04H7Uks+m0MX8jfvstOjEogcu3zhjVi6RMLnnMuME+HXMul0w0ehcyfuYOI:YLi0n+mufvshdVCLnMeul0WhVOoubK

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\VenomRAT v6.0.3 (SOURCE)\DevExpress.Pdf.v22.2.Drawing.dll",#1
1⤵
PID:1768

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations=is-enterprise-managed=no --field-trial-handle=4224,i,418820165226066361,4591810059585231024,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:8
1⤵
PID:4700

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads