VenomRAT Malware Analysis

File Properties

SHA256: 9f30fabd58907d334d6e9bd0e1694a47717fcd9bc8110b9d719ffd6ea091c6a0

MD5: caa074ddebe1ed43180c6b62e8dda323

File Type: ps1

Size: 1,503,070 byte

First Seen: 2025-07-15

AV Signature: VenomRAT

Reported By: CyberGhost13337

Tags: ClickFix, ps1, VenomRAT

Static analysis: metadata-based (sample not downloaded)

VenomRAT — Malware Profile

VenomRAT .NET 2021 QuasarRAT fork. golink.com URL shortener C2. AllowSmartScreen bypass. HVNC+keylogger+stealer.

Malware Type
RAT
Programming Language
C#/.NET
C2 Protocol
TCP/SSL
Target Systems
Windows

Capabilities & Behavior

Uzaktan Erişim & Kontrol
Keylogger
Ekran Görüntüsü
Webcam Erişimi
Dosya Yönetimi
Süreç Yönetimi
Komut Yürütme
Kalıcılık Mekanizması

IOC List (1 indicators)

IOC — VenomRAT
# FILEPATH 9f30fabd58907d334d6e9bd0e1694a47717fcd9bc8110b9d719ffd6ea091c6a0
TypeValueNote
filepath 9f30fabd58907d334d6e9bd0e1694a47717fcd9bc8110b9d719ffd6ea091c6a0 PDB
Tags
ClickFixps1VenomRAT