Extracted

• • Target

    clientfinish.exe

  • Size

    74KB

  • MD5

    904b56c15b74175ee9ad9cd128dd0c6d

  • SHA1

    97a36639afebb07948f036f83f730b763ce17d97

  • SHA256

    2b2e2be82fc0f29c6c91fa8fa530bce3859a78b22b937645553826c81f7e2852

  • SHA512

    cda12a6c221b5b3641d71838701781498d022b26a62cce749977008b739dfe2839d40dd2823f9fcd2c3dda67153a2524feaaf3df8905b424f2b593de9efb66fd

  • SSDEEP

    1536:PUVgcxaJ5CTWPMVbGuK/IkH1b+1gN6Q3Qzc8+VclN:PUqcxaDAWPMVbGuKBH1b+2NB3Q5kY

  Score

  10^/10

  asyncratvenomrattestrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • VenomRAT

    Detects VenomRAT.

    rat

  • Venomrat family

    venomrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2