Extracted

• • Target

    2760-2-0x0000000000220000-0x0000000000232000-memory.dmp

  • Size

    72KB

  • MD5

    abae485c5bb08a3c3d973a9f0bf4909f

  • SHA1

    7ab206b8de7e8e2757c25c0144164d337c454d43

  • SHA256

    120cdab22661efc232e872f45c5c42cee1f33f4b23996596bbffc1fe9cde1a03

  • SHA512

    890f360d52682b445f076c960ab6aa0babb5bd569bb8d54babecbb2ed266143c3746cccb7875f7589beabd8c0c64b66e4cfcf5629e43750a8b2547c40a33c42c

  • SSDEEP

    1536:yu270TceH2+nszByYfUlbAoEb7uYHTF25bxzlxOU0d+c:yu2oTceH2+szByYfUlbAoEb7uYB2jh0d

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2