Extracted

• • Target

    f8426a8416b86681c417b2025b1c09445cb2997eb34e5d4d5c63c2064e99abea

  • Size

    821KB

  • MD5

    d52ad01a5c9190d57300102c195db59d

  • SHA1

    6864be60323c8db158b2e5f64cd37bd7df8c39ec

  • SHA256

    f8426a8416b86681c417b2025b1c09445cb2997eb34e5d4d5c63c2064e99abea

  • SHA512

    d6b1fe3937c4613e84e95f2102217946ed5f4beb56d5b6d2b9ad27314160c80659583bab189856196142a70cba3985b036186798722d794f19d7172afd6649d1

  • SSDEEP

    12288:dMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9JhBBxdsP2g:dnsJ39LyjbJkQFMhmC+6GD9X5dsu

  Score

  10^/10

  asyncratdefaultdiscoverypersistencerat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • VenomRAT

    Detects VenomRAT.

    rat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2