Extracted

• • Target

    start.exe

  • Size

    45KB

  • MD5

    b733e729705bf66c1e5c66d97e247701

  • SHA1

    25eec814abdf1fc6afe621e16aa89c4eb42616b9

  • SHA256

    9081f9cf986ed111d976a07ee26fc2b1b9992301344197d6d3f83fe0d2616023

  • SHA512

    09b59b8942c1409a03ca4e7f77c6007160af4d557386b766516dba392750869c017d0fd5d6fbbfcbb3e559a70ad42adcb498595df186be180cfc04e921d74320

  • SSDEEP

    768:Nu2/0TckJ26WUsFvgmo2q7MKjPGaG6PIyzjbFgX3iWlcF4S0ru1pYI0sBDZOx:Nu2/0TceH2ZKTkDy3bCXSWlc6SKuRjdM

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2