Extracted

• • Target

    WaveInstaller.exe

  • Size

    249KB

  • MD5

    247af4e0a1a0d20bb625ece6439ee87d

  • SHA1

    28ad251bb0db405924834583c216db028373c681

  • SHA256

    a7b2894e48d292b192b8f33a3968c9b2c42e215b18d0b6ec91e4412d319f5608

  • SHA512

    b4c87d609821173559cf5fcef7e2dfeb444a63f0222367e28bfd83c2f29ff33d0588fa6b4dd74402ccc502dd97ea4f6f489295d186ca3add5d5e40876c616142

  • SSDEEP

    3072:+/H6zbxSl+GLAsNeDF5nI0PGIj9lua/Obw0hFv2PCWpIdNrY:yazbYlx0sNOBTunbw0/5Wpi

  Score

  10^/10

  asyncratdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2