Extracted

• • Target

    c9f2834a9860d26cfe06748d933b338c5f511a01442ade25930d292b52f1f625.exe

  • Size

    508KB

  • MD5

    f247152aeaeae01dbcc4ec5e1050f0d8

  • SHA1

    29e274717dfa16c409b74042805db6e77402a097

  • SHA256

    c9f2834a9860d26cfe06748d933b338c5f511a01442ade25930d292b52f1f625

  • SHA512

    6e565095d5a2c782b17b6cb3ce1b9eae71de79e9c46ad11d93c17a27b9a254332421bb67bcc37e3bd2b5612c11caa3a23fdabe27855faafca9bd0ce2006b48bb

  • SSDEEP

    12288:h7T9IHvH3L9j9ZqM7Gq9LjN68Ew9Xiys4aJKzbTMGS:hSHb7GCLjN68b9X7LcKzbQ

  Score

  10^/10

  asyncratxxdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2