Extracted

• • Target

    9d6edb0f6caafb53a4dff8af63100ce4c0297e4c71d251ad0a987c4111f84eb9

  • Size

    63KB

  • MD5

    36f8df0f89d2db3868cab2ed54d9ea5b

  • SHA1

    5add8dbb1df3d173e59c96949ed99994789511a4

  • SHA256

    9d6edb0f6caafb53a4dff8af63100ce4c0297e4c71d251ad0a987c4111f84eb9

  • SHA512

    638cc72b2bed01014ff109a1a4c95615f9e203be758839f1aa2d5836b9f38bba92867112ae81b939c54b7d231923090b881d276e152eb5095bc00784986a59c5

  • SSDEEP

    768:4q8Puie/G678P/C8A+X6iazcBRL5JTk1+T4KSBGHmDbD/ph0oX1JgUSuMdpqKYhg:4CGLpdSJYUbdh91eTuMdpqKmY7

  Score

  10^/10

  asyncratwhonkrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2