Extracted

• • Target

    c603849b79b5472bf8733f8c5d7f39bd886e6ce3d61b3cc7d7b4278e3a599802.exe

  • Size

    1.2MB

  • MD5

    2f528c70be4abd7138859b6fa0990b3e

  • SHA1

    a917e6ab7b5a2ead8fd23829678db650fef60b46

  • SHA256

    c603849b79b5472bf8733f8c5d7f39bd886e6ce3d61b3cc7d7b4278e3a599802

  • SHA512

    a408c3af7a5942bc415727c40d5ed0b4569b48937d65871ddaf1ab458fb6566a36f7114c758b34bdb237e6d1f6c9d74755a4ff53a88da20e31e353689739e933

  • SSDEEP

    24576:/jAAahFflN4/3qqDZykMnAN4V4JeR7tluqCo94Z:cxDNKuABUxjuHom

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2