Extracted

• • Target

    AsyncClient.exe

  • Size

    45KB

  • MD5

    2f0206e9dd15d9dccb2ecf93e7cf8ce8

  • SHA1

    48223ea372b29b082e8f44c610ffc0edd88ed2ae

  • SHA256

    24fa23a1908d5afe4a323872a2df703ecdc1fe033d321423c6c60f983d8d1f6e

  • SHA512

    0790798f4a11cbf09c2a1dc74ef92c1b2f84c3b659efec9df9099a1eaab9c6a00c430c8316aaefa94da206b589741c45e7f0bf56cd3b58e8e43f8a8130ff8160

  • SSDEEP

    768:puwpFTAY3IQWUe9jqmo2qLoKjPGaG6PIyzjbFgX3i+7Qs0M48wDdOTwBDZ6x:puwpFTA4/2xKTkDy3bCXS+cs07tgmd6x

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2