Extracted

• • Target

    AA8FC5D95C790933704E3CEF84C6EB89.exe

  • Size

    710KB

  • MD5

    aa8fc5d95c790933704e3cef84c6eb89

  • SHA1

    4ab0502eb865233b7eaa693de35978b0f8c84328

  • SHA256

    cc5488fc5c743d37268f55010af52d78bbaa3fafcb6353dba290b60982a17921

  • SHA512

    8fd48c0cd12cdd5623990f67b06b4dffd07837c5ecf35cba8f996a9e456bf8ba0dadd34d9615deea6f6cb14e262b3a5927628a9af74b71d1cccbbef418579f5a

  • SSDEEP

    12288:5maxpNBf2kBkD/BBy4gIpgTSV78GgJtnONe/T5fit:5maH+kBkDHzPpTp8GgJtn

  Score

  10^/10

  asyncratdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2