Extracted

• • Target

    9164f89ff66d0726e661c46dbafabf82c477a61b6d9a231170fd26910997c8ed

  • Size

    238KB

  • MD5

    9d1e589ea8c4b3c59d3fb46afa940da5

  • SHA1

    817bf841284e0279d15cb27f73a0939344dfb811

  • SHA256

    9164f89ff66d0726e661c46dbafabf82c477a61b6d9a231170fd26910997c8ed

  • SHA512

    a7db38a58cf9580c987fe6c3293dc279a67458850862d86d0cc60fb7c9213bf92311be2a8ac44ae055fd24619df8f76d33f32835a254d386e4e53e2602d63ac2

  • SSDEEP

    3072:/Yzwrq5J9SwHMFF9Kw/kxLk42s/8Y31/Yvi9GA54IkMwP5gMTmmsolNIrRuw+mqM:A9zHMFF9KxLp8YFgvwmZrTmDAN

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2