Extracted

• • Target

    b9a6b965b3011b04fa27380aec228208

  • Size

    344KB

  • MD5

    b9a6b965b3011b04fa27380aec228208

  • SHA1

    d3f20991fd476975af3ce87fc1a97ba7713b0740

  • SHA256

    53f473d83a96461cdd8536c086fe84140fbb4162bdc7f42a6e562051c4ee900d

  • SHA512

    497ecdc8437d4932e926a9fa8a91ecc2e6ffc06401ecc852541f4aad3552295f781a19609efc74d0b6811e51e7077ed27e6ff9a9520f8407eacc9501728892ba

  • SSDEEP

    6144:ZRDFhs3Na+OUEOVESzT1vrtSbvt3H8WlX6je9:rMbH1p8l3HllX6jE

  Score

  10^/10

  asyncratcraftrise3rat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2