Extracted

• • Target

    SpotifyPatch.exe

  • Size

    129KB

  • MD5

    4ed5ceebb1fd4b6bbc4eb963676f4ac1

  • SHA1

    b3c2f3900fa231849697c008c3deedbf0d2510f4

  • SHA256

    08f7f44b07fb6e06a731314aaaaa0d4ee2aa1f98b3ce45437e5b150c0ba6575e

  • SHA512

    cbc6a1f5a07dedeee42bc50a731a83f2d8eb6faf918484e16d947f7f0c041e3203ac151b75017d2418b054e6e4f6b09efd75f2bdb4fdcb7efcc10b44c7ad3664

  • SSDEEP

    1536:ckbdDbhR3fV9BJbFXGbbwSo9ljVGKc27pqKmY7:c8DbhR3tdlGbbwx91Hoz

  Score

  10^/10

  asyncratvenom clientsratevasion

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral10behavioral11behavioral12behavioral13behavioral14behavioral15behavioral2behavioral3behavioral4behavioral5behavioral6behavioral7behavioral8behavioral9