Extracted

• • Target

    thisoneisfordeploiyng.exe

  • Size

    74KB

  • MD5

    dc81d3462f5cc1bb64c65a3e1421c97b

  • SHA1

    93fc1fdca95effb16e79f461923a43bd6bf22d87

  • SHA256

    223a0cabecae4c597b2b060e8769f0e29aaeb6cd7794c6792276cea714694e88

  • SHA512

    85a8b08f91abdf756e0a1bd5a9070ba0fd138bc12432f062423ba3a747c11d363d1e984bf284b9f51ca5b564d3ab6b2b2f658caa4cbc3f9aea93e364d16b0054

  • SSDEEP

    1536:GUqkcxw+/9CZSPMVcReqIavKfIpyH1b0/tMQzc6LVclN:GUDcxw+1uSPMVGef5H1b0iQrBY

  Score

  10^/10

  asyncratvenomratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • VenomRAT

    Detects VenomRAT.

    rat

  • Venomrat family

    venomrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1