Extracted

• • Target

    aratnotamouse.exe

  • Size

    47KB

  • MD5

    4cf4e246ae9989b51e64b0fc1c8ca7d9

  • SHA1

    9f52c14c854fa3300f8d184add69310f779c5755

  • SHA256

    a17c7a643a56452209e4693b977b84b0265efc2f522b068046868a3f832313be

  • SHA512

    f7facedb94ef8420bafec8f78df9e50275923f1f95e66a1cc1bef733b103a41f4c7588d770b6a9a78bb7c34e429d66609573f6dc3b25f84129a390ac2420236f

  • SSDEEP

    768:2uQ/ltTxQ58sWUyOC2mo2q8EUKbj4MiPPI1Ov8Xv0b0PlysRJqxinOoY10gkmBD0:2uQ/ltTxib24dp1A88b0hRJ8inO/1Uow

  Score

  10^/10

  asyncratdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2