Extracted

• • Target

    Widows Defender.exe

  • Size

    63KB

  • MD5

    6ba07796ba7c18a6cacc048276e43592

  • SHA1

    1eced49b42a4bc2a80d7f458173f9b05408ce6ff

  • SHA256

    5ccd9ffc7816ab61d788ea00ae0db035cd84e5410a8ac9bb26d21008666e4bcb

  • SHA512

    f4e058fea4c33bfed9c52ad6952eb0e6e649a54e46fbfc90101a0a39ea1a894525206c9b791d8710fe104a7fde9e09648f601058f5b9604ed8847d09cfbdf400

  • SSDEEP

    768:wh6d2hP4Wo783IC8A+XqTuCY79VpTnBEP1+T4uSBGHmDbDDphWoXzHi4fSucdpqM:Di4WkYuJ9t8tYUbBhHfKucdpqKmY7

  Score

  10^/10

  asyncratdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1