Extracted

• • Target

    Monotone.exe

  • Size

    246KB

  • MD5

    cbb85438bd2ca32cd7ad4c7a4656f791

  • SHA1

    3c67296747df6812205c3d447de8c841ffc84551

  • SHA256

    6df84349f4d67f3d0f90ef741cb2626321e429eecdf630aca67a000dc8bca71f

  • SHA512

    3678bb96f7ef649fb7129e30334667ef7162e54e516b7a3ba6a97b7603ffb7bc65ab0dd43467c2fd17edbd02b97dba545aa152eefe2585b96f32fab62a51ad7d

  • SSDEEP

    6144:+5oaqJhJMHW69B9VjMdxPedN9ug0/9TB0dHlx7PMVeaesVbsDji:+5oaqjp/9TudHlxhds6Dji

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2