Extracted

• • Target

    Infected.exe

  • Size

    63KB

  • MD5

    94bf02bd2695d3600f8ee7a64d69d1f5

  • SHA1

    2b8898aa83db48d154205a3361effd6d693e4fa8

  • SHA256

    594fba274e35ea62c45899c7d1e2255bc5f3b745429b10e8d2453b59c2a8c27f

  • SHA512

    6e4fa49d2ced8e6f37432e25ec21fe827016201db40f902926d68a89e30d0dd2b0f5ca48af1c79da7ce51f3d30d8865397759cf0ac7e4aac318a8c8250c6c7f7

  • SSDEEP

    768:fDALAFjT678p4C8A+XeuazcBRL5JTk1+T4KSBGHmDbD/ph0oXIwjfWcSuAdpqKYC:cqTQJdSJYUbdh9IwjfiuAdpqKmY7

  Score

  10^/10

  asyncratdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2