Extracted

• • Target

    408c4cb78449baf846592637c9a8f03f47c3df6786acdce6e9ad0ef0db370068

  • Size

    74KB

  • MD5

    415479c03f59ed169402224d1bf7a158

  • SHA1

    3306a80290079a971df35eb037dd900865ccad0f

  • SHA256

    408c4cb78449baf846592637c9a8f03f47c3df6786acdce6e9ad0ef0db370068

  • SHA512

    4db90ce9f90100c7e9b7c637b6c1b8615d2cdaaf8e043d03bd1801069abdd457403e01cbf3f97d452128d68267d95c09e3105062f4ea47dd4997d45e504eaa9c

  • SSDEEP

    1536:zUt8cxqnHXC56PMV953pIZlyH1bo/MDT0Mz5QzckTtVclN:zUOcxq3O6PMV3slyH1bo0DT0Mz5QhT/Y

  Score

  10^/10

  asyncratrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • VenomRAT

    Detects VenomRAT.

    rat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2