Analysis
- max time kernel
152s - max time network
160s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
04/08/2026, 15:28
General
- Target Venom.exe
- Size 164.3MB
- Sample260804-swcxeahm6s
- SHA256 19731111b43050bcd65762d1454b34eeb0ba58804c6a4d1d7c2922d8e784ac15
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 25 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Venom.exe"C:\Users\Admin\AppData\Local\Temp\Venom.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4184-1-0x00000000027E0000-0x0000000002990000-memory.dmp
memory/4184-0-0x00007FF899720000-0x00007FF89A0C4000-memory.dmp
memory/4184-19-0x0000000010000000-0x0000000010005000-memory.dmp
memory/4184-2-0x00000000027E0000-0x0000000002990000-memory.dmp
memory/4184-17-0x0000000010000000-0x0000000010005000-memory.dmp
memory/4184-15-0x0000000010000000-0x0000000010005000-memory.dmp
memory/4184-13-0x0000000010000000-0x0000000010005000-memory.dmp
memory/4184-12-0x0000000010000000-0x0000000010005000-memory.dmp
memory/4184-3-0x00000000027E0000-0x0000000002990000-memory.dmp
memory/4184-23-0x00000000074E0000-0x00000000082D4000-memory.dmp
memory/4184-24-0x00000000074E0000-0x00000000082D4000-memory.dmp
memory/4184-28-0x00000000074E0000-0x00000000082D4000-memory.dmp
memory/4184-35-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-62-0x0000000004D70000-0x0000000004D7A000-memory.dmp
memory/4184-54-0x0000000004D60000-0x0000000004D6A000-memory.dmp
memory/4184-52-0x0000000004D60000-0x0000000004D6A000-memory.dmp
memory/4184-50-0x0000000004D60000-0x0000000004D6A000-memory.dmp
memory/4184-49-0x0000000004D60000-0x0000000004D6A000-memory.dmp
memory/4184-67-0x0000000004D70000-0x0000000004D7A000-memory.dmp
memory/4184-66-0x0000000004D70000-0x0000000004D7A000-memory.dmp
memory/4184-65-0x0000000004D70000-0x0000000004D7A000-memory.dmp
memory/4184-63-0x00007FF89D470000-0x00007FF89D59F000-memory.dmp
memory/4184-70-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-69-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-71-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-72-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-73-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-75-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-76-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-74-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-77-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-79-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-78-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-81-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-82-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-83-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-80-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-84-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-85-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-86-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-87-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-88-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-90-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-91-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-93-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-94-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-96-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-98-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-99-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-100-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-103-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-105-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-107-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-110-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-111-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-109-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-108-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-106-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-104-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-102-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-101-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-97-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-95-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-92-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-89-0x00000000082E0000-0x00000000090D4000-memory.dmp
memory/4184-144-0x0000000004EC0000-0x0000000004EE2000-memory.dmp
memory/4184-155-0x00000000090E0000-0x000000000979C000-memory.dmp
memory/4184-156-0x00000000097A0000-0x000000000AB36000-memory.dmp
memory/4184-158-0x0000000007EE0000-0x0000000008132000-memory.dmp
memory/4184-159-0x000000000B0C0000-0x000000000B8BA000-memory.dmp
memory/4184-157-0x000000000AB40000-0x000000000B0B8000-memory.dmp
memory/4184-179-0x000000000D420000-0x000000000D522000-memory.dmp
memory/4184-180-0x000000000D550000-0x000000000D66A000-memory.dmp
memory/4184-178-0x000000000BE80000-0x000000000D416000-memory.dmp
memory/4184-187-0x000000000F440000-0x000000000F968000-memory.dmp
memory/4184-188-0x000000000F970000-0x000000000FD22000-memory.dmp
memory/4184-192-0x0000000028010000-0x000000002847C000-memory.dmp
memory/4184-193-0x00000000008B0000-0x00000000008D0000-memory.dmp
memory/4184-197-0x000000000FD20000-0x000000000FF3A000-memory.dmp
memory/4184-198-0x0000000028F70000-0x00000000297E0000-memory.dmp
memory/4184-203-0x000000002AF50000-0x000000002AFFA000-memory.dmp
memory/4184-209-0x0000000002380000-0x0000000002392000-memory.dmp
memory/4184-210-0x0000000007DD0000-0x0000000007DDC000-memory.dmp