Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
30-12-2024 03:12
Behavioral task
behavioral1
Sample
VenomRAT-V5.6-HVNC/Stub/Client.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
VenomRAT-V5.6-HVNC/Stub/Client.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
VenomRAT-V5.6-HVNC/Venom RAT + HVNC.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
VenomRAT-V5.6-HVNC/Venom RAT + HVNC.exe
Resource
win10v2004-20241007-en
General
-
Target
VenomRAT-V5.6-HVNC/Venom RAT + HVNC.exe
-
Size
15.5MB
-
MD5
c9a19172aec8f4d35aabe33d2123d53c
-
SHA1
24f5dc16f84b7096d2561b628ee22e4aa3fb65a3
-
SHA256
51505fab78a7b318bcae9d3005fd3035517141abed16054541c29c03bb9af4ea
-
SHA512
cde593b070d0ea9067651fe107099621c3e1351ad00cf1c641b211fbb4adb380fb83d7a6276cff1e11496f43fc776c603f12ee67aacf0effaf192b4a53199994
-
SSDEEP
196608:IA5PPrnA5PPr3lAA5PPrJSe6PC7aIahLkNPFCZZwiJl1NLIsPA8fxvuIMzd/95Un:LebljNd60T7P+Zw6NLIsFfskh1BmXG
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2408 Venom RAT + HVNC.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2408 Venom RAT + HVNC.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2408 Venom RAT + HVNC.exe 2408 Venom RAT + HVNC.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
75KB
MD542b2c266e49a3acd346b91e3b0e638c0
SHA12bc52134f03fcc51cb4e0f6c7cf70646b4df7dd1
SHA256adeed015f06efa363d504a18acb671b1db4b20b23664a55c9bc28aef3283ca29
SHA512770822fd681a1d98afe03f6fbe5f116321b54c8e2989fb07491811fd29fca5b666f1adf4c6900823af1271e342cacc9293e9db307c4eef852d1a253b00347a81