Extracted

• • Target

    b27e4c8287ff688b8da4045756c22d08ccc0d100970cda2cf4bff09880df496c.exe

  • Size

    48KB

  • MD5

    1cfd4361277b82972da1c2bacadc270a

  • SHA1

    1fcb2293499713ff9948134ceb30be4f12d101fc

  • SHA256

    b27e4c8287ff688b8da4045756c22d08ccc0d100970cda2cf4bff09880df496c

  • SHA512

    6d66fdf94993c8e48d37055a8617b2fa6c93b077e1c1ee8dfe8ae1d6cd131186af5378d28d3369463202e65984cdd0a63960838fa45a72bf8ea04071b3f1c0a0

  • SSDEEP

    1536:Auq9JTPNY72AUZ1oRjJBabg7UdROYgduxMZh6dAv:AuqnTPNo2A41oRjJBabg7UdQYS9T6Gv

  Score

  10^/10

  asyncratalbiondiscoveryratspywarestealer

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  behavioral1behavioral2