Extracted

• • Target

    B264479FE94356B7722736AC60566C2430E635023933F.exe

  • Size

    831KB

  • MD5

    e801956435179f3817e559479dd04273

  • SHA1

    a98c17fe0ae934db542ea7ee207d8a8e254eea10

  • SHA256

    b264479fe94356b7722736ac60566c2430e635023933fca1834d6e0bce604449

  • SHA512

    9c4a33be1c32037675e345365084df2d65a481794fe8d38804bfe50a8f0ed915f0e6f6d5cc6995fec530fbea68f3322f52b6abeba655371d60902a552fce6cad

  • SSDEEP

    12288:tsVJXFwqsoQwEvGn/SUZ7aRLB8lSV3ZUlWvEAh4cc71LDhXXGG4X7ld6c8M9x8P5:tQJXdtsSW5hFcxdXXGJLac8M9wRHL

  Score

  10^/10

  asyncratzzzzzzzzzzzzzzzzzzzdepredatorpersistencerat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2