Extracted

• • Target

    b4036abc4db97f5aaae8672f3f32d5d0N.exe

  • Size

    47KB

  • MD5

    b4036abc4db97f5aaae8672f3f32d5d0

  • SHA1

    bdbfb245db7f59322b0a499b47e52a2a56170c41

  • SHA256

    7ad9611f4eae105eabc514ca347523bfa2b78df84cf150700548b9378a6fc9e8

  • SHA512

    2fdfe4d723d659886932eeb5b7e07ee0e0266be32ebea778543c2c83f7d034278eee3a6e1b31b84c0639f88b49dbc8bc8177113a18bebf5c72f870951782a70f

  • SSDEEP

    768:EuEk9THvkHCWU0neImo2q8aIteX0IRi37IPIVUVw0bn5QmPWQpyCEzwSVT8BDZPx:EuEk9THc726oIRaBVUVbbn5QG9cjzwcu

  Score

  10^/10

  asyncratdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2