Extracted

• • Target

    Drivers.exe

  • Size

    21KB

  • MD5

    3dbe554d99db5921c2869df9745b32be

  • SHA1

    ec61ad96e9848de6e55121c8acd8be6221cc204b

  • SHA256

    70b2d5ddb11d58b8a53d0fdc74259241057812e4dfc21a03b937a320e290d822

  • SHA512

    6e752d09c1c214bd73f5295eb6ff65eb324d123a57de4ae5516b972f9ec3208e962aca9089f9ef6b91ca3c9394d5c6fd68e806012e9b4aff3f9277b3ee8cd6cc

  • SSDEEP

    384:vTRQmNZSqP8MyoXKQmXNQltXpQyXlQx/uoOQtGQmXE9RrA5iXNjd2Ht5rkFJ0Wqx:WlOq2tzclrldjdKkFJCVA3g

  Score

  10^/10

  asyncratdefaultdiscoveryevasionrattrojan

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • Async RAT payload

    rat

  • Disables Task Manager via registry modification

    evasion

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2