Extracted

• • Target

    f1cf79e0ebbb693d10ca8b96d6c6aae0176c3a3417512bacaf0016207e60492d

  • Size

    82KB

  • MD5

    401cdb3441eaa85c7d5d85b8cfe0fe54

  • SHA1

    6bbb659c5c2b30c24313efa7a3775b78cbf385c5

  • SHA256

    f1cf79e0ebbb693d10ca8b96d6c6aae0176c3a3417512bacaf0016207e60492d

  • SHA512

    fb70afc7e5a382b3970cf92feaa12c4cfeba7a7dbca0d0f8736b5a38c0e4c42204cf4975081eab940524332fd3067bc4d5da053b55e71f983e01bc20454822bf

  • SSDEEP

    1536:x6UzwcxbUTCrmPMVAsP1K4I3H1bL/2sQzcH33LjVclN:wU0cxbgwmPMVA8wBH1bLesQK33LJY

  Score

  10^/10

  asyncratdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • VenomRAT

    Detects VenomRAT.

    rat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2