Extracted

• • Target

    AsyncClient.exe

  • Size

    45KB

  • MD5

    26e9b2f985b2680cf1a1881bd5e23b4e

  • SHA1

    8af6aa09c15ac2947666a6f8778f75da4bfbcb1c

  • SHA256

    de3e68021cc2c807e4c0297ab277396acd8a8939031bab33a7b72323b90f3f81

  • SHA512

    964803e4a82111ee7fd3648b9fc1d3d3260a43f2282d27ed4789f90060a8f240bece4712ee9c74004a5b7b1bd91fbce90c13709269d3e07b27c360e039aef7da

  • SSDEEP

    768:KuETKT0k3qXWUrV6e1mo2qyIQKjPGaG6PIyzjbFgX3ilHt7MPbCiMGYkZaOwpo4+:KuETKT0cE2/1KTkDy3bCXSRt7AmGYmau

  Score

  10^/10

  asyncratrealxwormdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2