Extracted

• • Target

    6d64174947404380a6c14beea26c75d4c6fc5d33f1f92ac872cdcd791be454df

  • Size

    47KB

  • MD5

    a61684f350ff956870a16d05173e4f87

  • SHA1

    986508cb3d8c42e11e3c500b1cd90cdee45a5fb7

  • SHA256

    6d64174947404380a6c14beea26c75d4c6fc5d33f1f92ac872cdcd791be454df

  • SHA512

    8683d86cb398083369096cded2db2b99a970e82c802ba0f5bf43e6bded480cd07890585a94bd5c5c1f331013a254b0feb4765811187ab3e3b078acc9127d03a4

  • SSDEEP

    768:guyxNTAoZjRWUJd9bmo2qLo4A2o7P5Pjy1fPIxK220bMUWCPAWO2KO5dfhDBDZQx:guyxNTAGL2B4W1P214xXZb9WuAW5D5d

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2