Extracted

• • Target

    15c5c9dc7be64d7d32bf2925ce8412b3f2f212ba7c25af969d9a8ece2086a5ca.exe

  • Size

    453KB

  • MD5

    2bb4a448b0132c70a9f3c03db54a52f3

  • SHA1

    2338d8ae200271ccfcf5bb8d97c8c98c52deb43c

  • SHA256

    15c5c9dc7be64d7d32bf2925ce8412b3f2f212ba7c25af969d9a8ece2086a5ca

  • SHA512

    5352592d1dfb6771db491a18dda53c481aee0a072d2c511959f3e2cf9532ac176a6a2f9520b22a4d4675098e089a819f1b4da89d0ec615c9458bcff1ea4cbe29

  • SSDEEP

    12288:3GHr/rHAbXqXVpJqrNix6LDQfLlzH1yv5p:3GHrMXqXwAx0QjO

  Score

  10^/10

  asyncratdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2