Extracted

• • Target

    b7e316cd815107632acf303548df4ced0a205b414c639ce91a237f26ea139fac

  • Size

    74KB

  • MD5

    86eb5ccbb33cbea2669afb35ebd38b72

  • SHA1

    ab6968378f757d3c8af4dc3b7e74dd5b2658a1cd

  • SHA256

    b7e316cd815107632acf303548df4ced0a205b414c639ce91a237f26ea139fac

  • SHA512

    d2cb6087202ce9ae06d3bf552f95f52f70ed3059e041295fa361233b11c0045b7d800137733acf056f3a955fe32837e7540de338f31e4d06b00c41aaeb8f3f6f

  • SSDEEP

    1536:tU6UcxsbiCCJiPMVCe9VdQuDI6H1bf/ZBvI/NiYQzcOLVclN:tUjcxsbX+iPMVCe9VdQsH1bf81iYQHBY

  Score

  10^/10

  asyncratdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • VenomRAT

    Detects VenomRAT.

    rat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2