Extracted

• • Target

    SunlightBootstrapper.exe

  • Size

    1.8MB

  • MD5

    7c4f1852448b6217ca92deecaceb6247

  • SHA1

    23f8b47a3a5bbcadb7d01dd8a727e0c2c48c0848

  • SHA256

    8f6baf69e7e047012b20299cd4d3bf4f86eaee8c7f42fed6cb4a33b79ef51dd2

  • SHA512

    4ef4281529f2159761f11ad890da0f7d79e2513019a1fd717b312ef2fb0ef9d01a54cb07561e40b0c12edd46089a8228f977ebb2ac109939bdddda57fad2f812

  • SSDEEP

    24576:dsmUYlIZ2RBbEeUhk7Dz6rdnkYA1LUqBFJJCZm4E6+eQ:emUYlIckeUAGnmLtFaZ0pe

  Score

  10^/10

  asyncratdefaultdiscoveryratevasiontrojan

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Modifies security service

    evasion

  • Async RAT payload

    rat

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan
  behavioral1behavioral2