Extracted

• • Target

    mexican.exe

  • Size

    3.6MB

  • MD5

    b9ce72d9fa47b960c5912662ba09b4c7

  • SHA1

    5147cd82eff424a9ba48f64d873b7200d546bdb8

  • SHA256

    2f05e23edec61e746e86cd46e79d6af02ec93705f755a1f9683e953cd9406890

  • SHA512

    8a59922d3c8acbc2224e66444c1e852392f378f0d288747f848169e07b1f23bf86d6bba10831421f5c3e81d8c74b791bd306cce8f545eca52b0e397694587e7a

  • SSDEEP

    98304:QkqXf0FlL9nrYAWAZi6sfLxkuahjCOeX9YG9see5GnRyCAm0makxH13U:QkSIlLtzWAXAkuujCPX9YG9he5GnQCAB

  Score

  10^/10

  asyncratdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Async RAT payload

    rat

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2