Extracted

• • Target

    c43396cd1bd4199d544b2abbcc33d5f06af2807258bce6010912efefc6adb0ba

  • Size

    73KB

  • MD5

    7317d31ebc5ee785cf499951c5a6593b

  • SHA1

    b49ac40311cb40fe70d5457c73fb998b6830b809

  • SHA256

    c43396cd1bd4199d544b2abbcc33d5f06af2807258bce6010912efefc6adb0ba

  • SHA512

    c6288511576dfc631ac32f27b750c713d5f71bb4cbcbc2939f5718476b04ba1a82fe318898dac80f9c7f8a8bae74cdc6e6b00246148e122471af968fae8a1328

  • SSDEEP

    1536:TU1gcxe1eHCZWPMVKe9VdQkhDIyH1bf/paLQzc33VclN:TUKcxe1ayWPMVKe9VdQgH1bfoQSlY

  Score

  10^/10

  asyncratdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • VenomRAT

    Detects VenomRAT.

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2