Extracted

• • Target

    2328201990de5c77c0353c61e628c68a01aaef1d4566ef9816a1f0333562c5ea.exe

  • Size

    589KB

  • MD5

    d53fc47751fa8ad0b613c489aa779bda

  • SHA1

    ec14fabb10b9aa9f05344c03802294e114bb2af1

  • SHA256

    2328201990de5c77c0353c61e628c68a01aaef1d4566ef9816a1f0333562c5ea

  • SHA512

    b6441aeff786d23401267f23960410614a2686e3d10b6f58c5e9042d7c2f48a4975383f2ec05cfc801faa39a3bbb6bb58161b5ec248252c89ab9bf6ef382e326

  • SSDEEP

    12288:ToQyRAMIgF72A0ybuxRN750J4iWoM7+EgLHpP3V5Ua:uHIgF7Wybexo4iWoM7oHpP3TR

  Score

  10^/10

  asyncratreeddiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2