Extracted

• • Target

    0f07d465b2fb93b367ff2a393574f87b932e4627591091bf8f2f94d3c8e75715.exe

  • Size

    45KB

  • MD5

    556407eba4cd85a57fdb6dcdb12e2269

  • SHA1

    d68a0f0831556c4ef3fb3e003385e897a210b751

  • SHA256

    0f07d465b2fb93b367ff2a393574f87b932e4627591091bf8f2f94d3c8e75715

  • SHA512

    d7baa345dac09eb418604a3d6ace4af0a54cb2b5a627967bc9ccdbb5ee5021ef6dd1e042fcc4165aeb5a38f8583af56f99e5472fa1442ee0335cf62e9664c6c0

  • SSDEEP

    768:uuokxmFTkUE1YAgWUOl1nyamo2qR+1uGJAIGYPPI3njbMgX3iWHCHiGTCE2BDZax:uuokxmFTkUMYi1t2HsNx3jbDXSWHnGm0

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2