Extracted

• • Target

    d995f4f7da717e21da338606f0ca494c6ad920b261114fb965be06d1fd1ad31bN

  • Size

    4.0MB

  • MD5

    0bca1c34f121425ad181097f4401aa00

  • SHA1

    b2450a936001d83c5029df4933b26d9b1732fc9c

  • SHA256

    d995f4f7da717e21da338606f0ca494c6ad920b261114fb965be06d1fd1ad31b

  • SHA512

    86b9beb0001553f9b898bc9ba130e39949642ae3d027b7fefc6f3252002ab62679de4f6eb70d00555b43f8131b3480821b3fc182f374fc53a479117140407340

  • SSDEEP

    12288:jiG3ngP7iw2yTRruvLG2b2iGDMiGDiLuL:X3gTqURCqlDIDe

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2