Extracted

• • Target

    e2fc16855f5a5088f9d9994d0b8852a4a57bf8be68086fb819443e684992d5c9

  • Size

    821KB

  • MD5

    0b69301f9ab8060c4608e75f33ba34fc

  • SHA1

    9f4ca0e8025025c21fe8b0cf438c00b1981f11b3

  • SHA256

    e2fc16855f5a5088f9d9994d0b8852a4a57bf8be68086fb819443e684992d5c9

  • SHA512

    8bfdada6e8b82f6566ac5776520fc10b006c02a24ae59d9550b360db8744495f8ff1f96c94395ccdeb95a1734b52c9d9ce616b45148d9f3cf0196c12de598a99

  • SSDEEP

    12288:dMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9JhBBxdsP2g:dnsJ39LyjbJkQFMhmC+6GD9X5dsu

  Score

  10^/10

  asyncratdefaultdiscoverypersistencerat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • VenomRAT

    Detects VenomRAT.

    rat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2