Extracted

• • Target

    2a5dac302572ede5da5d53df170d5882937027b58290b6ea60e24478453276c9

  • Size

    204KB

  • MD5

    cb4322618b0b4db058a877a4496155d6

  • SHA1

    701330516ff914a042f484d123f940a45175b2fc

  • SHA256

    2a5dac302572ede5da5d53df170d5882937027b58290b6ea60e24478453276c9

  • SHA512

    f45e435db334cec2c39fdc3ab44be26ccff60f75a883430794bdf7a208c6e033b666b22fe93d8b736d336d07b539824d57a884df62004500bbb8e2318f7757af

  • SSDEEP

    3072:bUQcxeNykmPMV/prEH1bxmFQPWwfBtOEp7ybMj/0vU7yZED+CDgby/Y:bWkmPMV/ZEVbMmW6mEpmbMjgU7yZf8

  Score

  10^/10

  asyncratrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • VenomRAT

    Detects VenomRAT.

    rat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2