Extracted

• • Target

    BYTER.exe

  • Size

    13.3MB

  • MD5

    9fd8d6a471d60fbf60d029504916ea50

  • SHA1

    e1cb6de275494b2642a88a0b2136b1ec84551947

  • SHA256

    ceb87fb8fc18a0699bac5b532cfdad64cfdf755efccb03b2571679460b465724

  • SHA512

    c80968a9e7ecd6c31a4dcc5a27cd47260d0bc2601312b3b3a250487bea64e63595c062c9f48358fd477609a4bfcdd82bfca1da8689b3c247ce62d3fbfb409f7b

  • SSDEEP

    393216:0tk1FrHQc/l+FvxWBqWwVrCCIIedFQMG9:0tkPHQG+FJAqWwVCCI/Du

  Score

  10^/10

  asyncratdefaultdefense_evasiondiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Obfuscated Files or Information: Command Obfuscation

    Adversaries may obfuscate content during command execution to impede detection.

    defense_evasion
  behavioral1behavioral2