Extracted

• • Target

    62faa6629d18abb3b5f3a1137267ba32fd685bc8fd2de7b9b2b908d156511cf0

  • Size

    2.9MB

  • MD5

    5e985577ae17524bda2af7b183bbb0bb

  • SHA1

    041e93e1a56d37032fc2fb1f61481bcbcef04f8d

  • SHA256

    62faa6629d18abb3b5f3a1137267ba32fd685bc8fd2de7b9b2b908d156511cf0

  • SHA512

    f2b3ac015705bd77c149a727413d8987cc018cc5ac3a48e3841ef7bade75e3a69497e77092e7eb0029c551043cf9af3657cd640cc23387b9703344dd0bf0acd2

  • SSDEEP

    49152:1IOY/SiSf6KSIshmgTlxRQv9rn0KtX2pyJz0qGoyEs:1kKZshhYv9ptXZJe

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • VenomRAT

    Detects VenomRAT.

    rat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2