Extracted

• • Target

    d94acc2a29273419227c070be66a652e5d074de175d0ec572bf9dee2f833703f.exe

  • Size

    48KB

  • MD5

    dfeaafa71cc4f33a546b050aefb83519

  • SHA1

    3b34503a035774a83927fb5fc99a060c84e9b9e9

  • SHA256

    d94acc2a29273419227c070be66a652e5d074de175d0ec572bf9dee2f833703f

  • SHA512

    70c9ea4f9ee001648d85e11c6b6bc316b83c29866b97cb60fe2dc8f0994a721dcc77d9930020e5bbd19cab53a58cdf13c9af8d2f46d8e492d5e8e28d4c6763d4

  • SSDEEP

    768:zukaVT3ongoWU2Gjimo2qrInm5FtxsWPIsm3TcSU0bFrBM/WTepY8hUudDHBkSJx:zukaVT3Q+27OHxsfsm3tbBrTIh7HeS5V

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2