Extracted

• • Target

    371d987fe4c358d4c0c968ef2db6f2ce

  • Size

    790KB

  • MD5

    371d987fe4c358d4c0c968ef2db6f2ce

  • SHA1

    decbb6376480456f62a51266150b4f80407bec4e

  • SHA256

    a3e30ec89c3473a23363f4752308ebaa172bc3c437a85568fd4f4578e1d94025

  • SHA512

    96fc87c186cfaadf33e702da08248c2360adc2b9aa3e7bbbfe2a9abcfbc91aae86739eb3d1e29f2681cb19bd7f4fb110a01b705703b81b10708ca8e6d8f3c84b

  • SSDEEP

    12288:Dli26AbON2NdJxXTqsBl2lraxCkuNYqSIJ2XCDk8Aj7ItQcBcZcaR/+w:DMAPdJxXTlIraxNuNji

  Score

  10^/10

  asyncratdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2