Extracted

• • Target

    AsyncClient.exe

  • Size

    59KB

  • MD5

    7ffbcac612bf8f2c14d872af7e7c68a0

  • SHA1

    46f7f128b782946f0ad74ed4a278a4c266e3ed5d

  • SHA256

    5cd5530ea7aea507cb7faf6f9049448252aebd2cd4a4ecd7f040a1c44274dbaf

  • SHA512

    4428df372dc50d285630883afec00fb375245ea52b36db976eadc513669d438e4eb398153e5f1317db8c92fd59cc418cafedc57db97b52b23190a11c0e4d71ad

  • SSDEEP

    1536:8uk7VT0M912CVcPpD4zbkhc+eaT9VCbAHdMn25FyX/oah:8ukJT0ML2YcPizbk/998CK2P6/oah

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2