Extracted

• • Target

    try.exe

  • Size

    47KB

  • MD5

    c6e12fefdec665d8ba5f2102f1329e3a

  • SHA1

    fa2d30cfad462faa20a6a48f1b20db59c2d31bdc

  • SHA256

    3d1628fb4c4f00119992f91caa94a313f26a8490058a1cb3fc42850d46415e1b

  • SHA512

    ad0a6f3dcc08aa0f135ca777d186f1ed76df60cf580f76cd5257ded9b5d83712329d3ff0c1e3a5dd328503885fce65339e504778ab7e107bc02aa3563325fb54

  • SSDEEP

    768:4uY69T3kH1jWUvTqRmo2qbfsvQQfCIVPIk4k2L0bsHVy+j/Mu3Ff0WQeMfSBDZ4x:4uY69T34y20Qf/ylrAbsHVhj/1f0rsdq

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2