Extracted

• • Target

    519f3ceedba4471f3d5178451c1007911145fb6eaf4e259a2c29b8e3483dabb1.exe

  • Size

    63KB

  • MD5

    9eb074e0713a33f7a6e499b0fbf2484c

  • SHA1

    132ca59a5fb654c3d0794f92f05eaf43e3a7af94

  • SHA256

    519f3ceedba4471f3d5178451c1007911145fb6eaf4e259a2c29b8e3483dabb1

  • SHA512

    367fbbf6f058ef21367e329c8b0373d482c9c97dfbb42a67b17c9b1dc1d0139ae879c8ddb87b0960c5545746610d2c5690343abb458818c2dea9dbca66f39794

  • SSDEEP

    1536:JKh54k58k/GWZOKuvUYFgF4yY5biArLdcKgtiCrITGFx:JK/4k58kAKuvUYFgF4yY5bikcltiCOGx

  Score

  10^/10

  asyncratsolarafakediscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2