Extracted

• • Target

    c81b9af6fd20ff231e4ec8ce366db0b0N.exe

  • Size

    45KB

  • MD5

    c81b9af6fd20ff231e4ec8ce366db0b0

  • SHA1

    6342a91dd793055d6767259d2b7eaac753e90cf4

  • SHA256

    353120b1c48a0071140cbf448d6e1eb88ebaf80a1bd9b6b7e39da0eeaeac0965

  • SHA512

    92c289265d2c4af7608c4aac9065fbbeb63f473f517df4400c1ed74bc53ebce137d61504005344c80bd3c5a076fff4c7070a6e1b4b957036155505d5958cc61e

  • SSDEEP

    768:uuokxmFTkUE1YAgWUOl1nyamo2qR+1uGJAIGYPPI3njbMgX3i4V30fHjygxmZRRg:uuokxmFTkUMYi1t2HsNx3jbDXSC30fDj

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2