Extracted

• • Target

    bd6117aae6da215e0a1925626c4c83e0N.exe

  • Size

    63KB

  • MD5

    bd6117aae6da215e0a1925626c4c83e0

  • SHA1

    2acc947247289cc1eb8458961e05bbb87d4bf030

  • SHA256

    dac7bd63e97eca95db8f8a4997d9e00f058239229c59869fb1151db6be452c8e

  • SHA512

    17dd2bf6cc481a3e6f53bb9ec3c98f1edb873e4516d6dd20d25e22acc9d5243f06096923bebc2c1a8adde13d6174f4162472f1ed411902b49015c30954ed83af

  • SSDEEP

    1536:ghWRpM16zMsN2eeiIVrGbbXwEho3GWDpqKmY7:ghWRpM16/NveXGbbXvhqgz

  Score

  10^/10

  asyncratvenom clientsrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2