Extracted

• • Target

    c60ba9763d5435d1f9642f76f5e51104e52d496d706f19238184ef7906bbcded

  • Size

    1.3MB

  • MD5

    76373a6166baaf98f7bcaeda47be1c31

  • SHA1

    c847ef0f375229315ffa87706766c9054b4d6572

  • SHA256

    c60ba9763d5435d1f9642f76f5e51104e52d496d706f19238184ef7906bbcded

  • SHA512

    aec1da7987348823f63151ee0ae7902bb2d8d4321d35c91d58711eac7c8cb973600d8d15ef9965881fd829388031e22123d039a3d56471c0bf17719f80a8eb83

  • SSDEEP

    24576:GzyGrV6xcTu/39VnvGORWPBmrze5e+6nJCA6t1zsXoOPG8:GAdPhwJj/Ob

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2