Extracted

• • Target

    now.exe

  • Size

    63KB

  • MD5

    742a8c6a17671e7db3e4fa1c15534fb1

  • SHA1

    5f6e4b10c34e512cd1110b6c67b0722d00d5a34d

  • SHA256

    6a93f241b22b9784403998ec187fcf75ae9dd830aa834b7698052165ef225ec0

  • SHA512

    315a99105682595fd8366c3e237e57a187a4902bcf49894a35aa3d5a0cde32d26168a530dc9d9b8d00d27debf2be6f6eadcd1b17ce86c53a1d80c5a711f3d442

  • SSDEEP

    1536:DZmttUdjLAQBae5Q5uEPGbbQwTPVbGBi/J6GVZVclN:DZmttUdjvBF5Qw2GbbQ6dzY

  Score

  10^/10

  asyncratdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1