Extracted

• • Target

    penisware.exe

  • Size

    74KB

  • MD5

    315cfea4df6af50734fc2405ece1e4fb

  • SHA1

    cc0ff1cdbb9782d9b89928f5e4cd974af3721b0a

  • SHA256

    6ea3a5ebedbe3a2c550261a4a2949c4304584fd8cef0ba6189c57ccd6cad1e8c

  • SHA512

    ce70a8905f6c1bbf9045d7dd1d799bb3dfbf2e26282f58adc06790d7887b979e0f52c262913b7ded3b953fd2cffd986c57f5b62ad2bae5aac71e45d8b58a3e23

  • SSDEEP

    1536:ZUv8cxBPowCH6PMV+wPgIdH1bI/PVducQzc2LVclN:ZUEcxBPXI6PMV+EjH1bImcQPBY

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2