Extracted

• • Target

    XWormLoader 5.1 x32.exe

  • Size

    256KB

  • MD5

    dfad6480336587ed4ca5f713db8e5bc5

  • SHA1

    61e57a8e6ccb6e46623f51726c1f5851724c4a58

  • SHA256

    02f4c1fef324c120432c4d54cd97d4aef3eddc2c426b03f9990cdeef37bdf6c9

  • SHA512

    6f19ea16ec970529a4b38edbac13e5229580fe29303a8b3e3b7646637f44d73434fdfb029eee33e26fbbfb91489cf7156cc1ec12c3658ddeacad340235121a85

  • SSDEEP

    3072:jMSncRzAOFI2o8F7CSQkPKufUYFm5boDkf6d6xHA2ewhLapuvpAsZOyMqmyBeYV7:YSncRl3oQXC5bdfdl/GWGwqqm1

  Score

  10^/10

  asyncratrat1discoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1