Extracted

• • Target

    THISISARAT.exe

  • Size

    47KB

  • MD5

    4744dae074b1b9c94c131aefa1f3827c

  • SHA1

    927c9ae343d07004ea1a618a0ef228a26649eb92

  • SHA256

    f2451118fa6c3e2c0f09e71c60cf29021f0736c47abd236e892f33ccb2ddd98e

  • SHA512

    4211db34221c07b5842f6fdbfa83be11861d28ab1036224a0a8b7f695a8bf1c78422c86685cfa9cef6c503d9638d4420418c180870202c1de1766435a58c0be6

  • SSDEEP

    768:xuETKT0k3qXWUrV6e1mo2qyI/L8CX5a15WSPImqMaHnQ0b9V6KySeZ19X6Qs2mP9:xuETKT0cE2/CL8S5C5W7mqMgn7b9WZ1Q

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2