Extracted

• • Target

    aertyhfd.exe

  • Size

    74KB

  • MD5

    b8ffca27af2dd7eaf924544d9f4dc080

  • SHA1

    9cb5945789c67912ac20ab478bc0596b10db28a8

  • SHA256

    3ea64a857060b493866007e05f14c9d55f33dfca30bf4b5e7082e2270d25ed9c

  • SHA512

    a9f3f7bbce8d658c5a6a8489ddb4d694865074f29499ee8856cff3bdd87758761d03466ccd509c24c7f68c14907f70c866ee1bbaad9ed22e51e4d500b8a58a43

  • SSDEEP

    1536:eUYNwcxKHXwzCtmPMV3JSaGLm43XHIls1bP/7jnQzcyLVclN:eUYicxK8WmPMV3wDn4s1bPTbQjBY

  Score

  10^/10

  asyncratvenomratdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • VenomRAT

    Detects VenomRAT.

    rat

  • Venomrat family

    venomrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2