Extracted

• • Target

    4b2e910c45f99294750c8adb3e799c39a1adfd0d9fcfdc7f36773037477ec977

  • Size

    52KB

  • MD5

    43bf2b1b12150aa4f795cb6d6eff697f

  • SHA1

    ac0ef971638009f16c8d5f2d30cb9baf656d2045

  • SHA256

    4b2e910c45f99294750c8adb3e799c39a1adfd0d9fcfdc7f36773037477ec977

  • SHA512

    0d052d66436d3590c624b4098fb21a9064497d24ca5997a88ae3159f2ad675733c8dcf7f6dc8b44b05b6a68d4c68b6af56d52bfe6c65b90c586e241bf074a5f4

  • SSDEEP

    1536:WAcOVTwJ4u2NK7wHz3bCXSnSFba5cNT+:WAcyTwJ4u2NKEz3bCMSFAIi

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2