Extracted

• • Target

    ..exe

  • Size

    145KB

  • MD5

    a55e72b66a2767fa68ae713250ff0b21

  • SHA1

    550d1c5ef3c23cc59392ea24c67f4f43669cecef

  • SHA256

    a31527ac5e1df418a9ee25b623ad730c44e18b4b62aa6e649bb6e5fd9e0088f5

  • SHA512

    cb47663be048c07c6e9e6387946a512f0435be1a4034a5ee2549025b70cd4c5868bfba0ea3e76af0700492f1c8dc388f83e0c7f37ac64011ed2eaca06daef1d2

  • SSDEEP

    3072:VuIJT8kD2gEdIOcYgb8GHOxk0y+Bz65/M6If+3Js+3JFkKeTnYx:VuITSzCOPgbmyMxBt25v

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2