Extracted

• • Target

    2498d43b33fdf705d23a044d0704271b.exe

  • Size

    47KB

  • MD5

    2498d43b33fdf705d23a044d0704271b

  • SHA1

    79b2ee6e706d561533936cde87a46830fbfeec9b

  • SHA256

    d1ba8885bb27b8b53e8754181b474f47d0afc57ce406ca4c18edf111cbb63226

  • SHA512

    79b0ff8be1762e31c20ae5b5440958bbe652b11f219a5542d9cd2fa789c90dd5898b14be2245ae03f49c5ada54db0547df5eacc7d143f9c0ea608fb4600b4690

  • SSDEEP

    768:xuI9dTsErkZTWU/lPhmo2qbfhtE7Tb7PPIOinDpm0bR4bvYvrQWrfdxF+XaBDZMx:xuI9dTsXB2VTb7IOindpbR4DYTQEdxF6

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2