Extracted

• • Target

    AsyncRAT v2.1/AsyncClient.exe

  • Size

    45KB

  • MD5

    e5644b0d2d9789b3ed25fc2f6ee7cfbd

  • SHA1

    dedf40fc2e32ad7857e0130127797e54c3544a0c

  • SHA256

    f511b850b92b6f8bfff92de2198da7ca3aca923630714fe368bc75cdaf600fb7

  • SHA512

    41c39a92047ca5d8fd6aeac19b6e3be63bca7dc9ade0b1cddce9b36de65477f67b0be5b60cf0eb58bcd3c52d2ef434f01e040282b4378e74eac38b01218da93e

  • SSDEEP

    768:Hu/6ZTgoiziWUUM9rmo2qrrKjGKG6PIyzjbFgX3i+nOItkfkY4tlefBDZjx:Hu/6ZTgle2mKYDy3bCXS+nOpcmpdjx

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat
  behavioral1behavioral2

• • Target

    AsyncRAT v2.1/AsyncRAT.exe

  • Size

    6.0MB

  • MD5

    34c62e8ffbe11193392c51872444deaa

  • SHA1

    b7920bb0a3f068f0a261f643c968895b858f04ef

  • SHA256

    e35bf51c40c50f326fb71764c23679be6df7bf8f67616bd5329c9948901a251e

  • SHA512

    f2ebde604b43e96e24c5107a25383f720990bbe7ff808f0b1a51ec8b0d660cf8fd4b4417ace05e6181fc05cafde1b30d3e074b0c3f0ea31926d80c8d2e813a6b

  • SSDEEP

    98304:7arL7Q+u1R8ubXx4dUeG3wBPKS8IbwIFcNZLQMe3tTJ0HZGCFgM:0A+u1R8OGdm3m+rQD9F0kCFgM

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral3behavioral4

• • Target

    AsyncRAT v2.1/Fixer.bat

  • Size

    141B

  • MD5

    52ab2690a33a51804764be81820504aa

  • SHA1

    36af53e8b27ea737c255402156c77c5f9be17aa0

  • SHA256

    5255fa89ba49c5f1f2c81d66d42e3b16305296945683954eab1492ed11b90b4c

  • SHA512

    95579203bd7e3f2104ad2f886b162f9938d6e371ba351b0b9c5fb5d3368d674f22f4c2ccc54aece5a9ab5f044ca9deeed63a4ad30ffd42787c54807c8396f21b

  Score

  1^/10
  behavioral5behavioral6

• • Target

    AsyncRAT v2.1/Plugins/Chat.dll

  • Size

    109KB

  • MD5

    a3980e1b9b6d8d9569cf732c2e0415a4

  • SHA1

    3a8c3e66d4dc0fe09abb38fad081c8edbbf83672

  • SHA256

    035083d86c6bef2b7c89b3f55ee7c230339c6f9e10031b6c30318524a8f1a683

  • SHA512

    480f36409d54430dcca86c0a21802ec4f6fff62609a123823fb49de56d51650fdb6a8264a6cf228472ec84dc7e9f11411950b99c1f36e3db77af66268d69da42

  • SSDEEP

    3072:sox07OMKc8saMCEBpy3V/mEE0X4UQ2YhW:R065xsanEC3tPxIb2i

  Score

  1^/10
  behavioral7behavioral8

• • Target

    AsyncRAT v2.1/Plugins/Extra.dll

  • Size

    113KB

  • MD5

    0461b04c1092f1ec6d5c4188d7a6cdce

  • SHA1

    4e422d6c9c3d39fa65f9d48b667f26aca57eacbd

  • SHA256

    5e4836acd45f8147657fe0bea3fe1e1bdf7e0bdd3f305e873ac0d928ece167ec

  • SHA512

    415aecf264ac6d83dca612d4ac49b000da2a63e570d12b9b7f79d2577483ce89a79535e448c2f8fe04a5789653fbfb7f372fe13cfd2d54ac13f90788f711d851

  • SSDEEP

    1536:qLAmqD88tirOe7AAhefx8y9U3Q2Y0eGe/Idkz9Mw88fiCPfg2SLrkxHqCnCU5:tESeu8iKQ2LeGrdkxVXfiCfQLoUCP

  Score

  1^/10
  behavioral10behavioral9

• • Target

    AsyncRAT v2.1/Plugins/FileManager.dll

  • Size

    123KB

  • MD5

    65cee3693e79eca4cb12b451157c55b9

  • SHA1

    1f9939dd9fc3da55202e4b85461e80ba69cb90c7

  • SHA256

    301450a9f064a8691b08cbac442c254ead82f5aca333064a0f38f6dfc43c57ad

  • SHA512

    57501b3056a9943d42461e3d8b22484988eea97c644af44c954bda6c6eb74352054b65b2b48972daef1d29394b540b69e76492f3d9818dfd7622a60813f97c0b

  • SSDEEP

    1536:6YMr2jhTn1KJkUB1+mHHFaHdusD6cSiDzLy7C8rKRSUcvgM3THyX4mwDLtvf:cAKlXrl8N6c7MC8rwcYMDiutH

  Score

  1^/10
  behavioral11behavioral12

• • Target

    AsyncRAT v2.1/Plugins/FileSearcher.dll

  • Size

    186KB

  • MD5

    ddf604267bda3c0675dbd23d2da6355e

  • SHA1

    f12557558c84fca29e461f411483024bbc73c2b1

  • SHA256

    cd48e4813a23100437ac205a9e3cb85fac743c300d3eac76157c7aac651b74c8

  • SHA512

    6ab36c6ceb7b4eae9479137052025a10d825031929cc3138e1fe5873d01966e346e14ceb0478336dcb0f44948f36c055b3358c182eaa5d1c269c5e34e51d24cf

  • SSDEEP

    3072:62gkNLfpa5hxCyDqdIB0JyBK+AQ+zaaSGaSHMdcvIe3NFJutuI0CSXVGB9yDXcf/:SAJyBn+VSHSsdqjJiulCcVWi

  Score

  1^/10
  behavioral13behavioral14

• • Target

    AsyncRAT v2.1/Plugins/LimeLogger.dll

  • Size

    107KB

  • MD5

    143b543c696765dc049ea885c619d6ca

  • SHA1

    c9732161fa303dbe996a961e1a60d211b5900bae

  • SHA256

    c860f7d71307487badb04c598a2f20e25dc8f4275e4b1960af9470bcc97f9258

  • SHA512

    01514c6331b2a82e711f516c62a07508b8047ebfd5cf8b224e6a6dfed2ce3d55c25f3b1fd7ef61ba20ddb279db5c83fc517fdf7b02249b2f450728702d748cfe

  • SSDEEP

    3072:3D3Uu0jICycA3KWdLDbk4XgxnnnAs77O+Kd+Ttz7:3j69PIs7qM

  Score

  1^/10
  behavioral15behavioral16

• • Target

    AsyncRAT v2.1/Plugins/Miscellaneous.dll

  • Size

    252KB

  • MD5

    1b4ed003e8eadd108d0fb7ff62e9a265

  • SHA1

    57234ce5eac96bae65bc750ed1d861ba1755cfa1

  • SHA256

    386f31ed9819f8e7741bda6648f83f9d1148bb4737b2d0a2d919ccfda7bfba3f

  • SHA512

    d53388d7d006176fb5d526e04b65db6da01aacf490a6821758eabb44289e11f599ecc563e70f95d32bf978937f413f50cc7bcbf225e9c217dc701e6292ce1251

  • SSDEEP

    3072:zHzypliK9GVeJ502mHi9DrNjAIus/lbBjFnxfGTkXNQgLTfnl/MglAR1c:uiHVSNmKAv6lBjFxfG4XNQYVMglm1

  Score

  1^/10
  behavioral17behavioral18

• • Target

    AsyncRAT v2.1/Plugins/Options.dll

  • Size

    115KB

  • MD5

    6ec0477145599f7309dc4314086da289

  • SHA1

    95a0782d2839614c06a09afe07ee0103683f9b53

  • SHA256

    ca16f7b56727feb51ff803d4cae5af1e59591cda18d1cd03ba8644962e10469b

  • SHA512

    c1a5693b56df37c035228573e7407f90fb9d647cdf65d4bffeb5e2c210b480395ded8334e2d07026d66c043bb77c9c2318500871941e622e6b12d6a22dad680c

  • SSDEEP

    1536:Wq4A+TpDE4bB9p3q4jMefCVFpSiSKV6Fm9AT+/GHc+nQ2KxoNStpvE:W0+BqkqpSpFm9A+/G8MQ2KeNS78

  Score

  1^/10
  behavioral19behavioral20

• • Target

    AsyncRAT v2.1/Plugins/ProcessManager.dll

  • Size

    104KB

  • MD5

    cf7117a7231d2333f2026ed8ed95b390

  • SHA1

    5158854dde9de34d0c33cff9b41cd41f65d6515e

  • SHA256

    4ee39209212bf88fb4f1465f1fef028c67c9d5c4e901dd24124406b963d75d88

  • SHA512

    6a006094862d95e97928047cab62defb85c6e05918ce1b4004d993c8846f2cab8a76674f5e6ed9da24b831f871561887703bcab66645397e67e6fb2059a0ef0f

  • SSDEEP

    1536:xmOFid+ekJhQt6m7jUDUove780zAobiZVM0GgvSj4kElODdG/u7F:xpsd+Hh87YDUiXoSM0GgKskVBGy

  Score

  1^/10
  behavioral21behavioral22

• • Target

    AsyncRAT v2.1/Plugins/Recovery.dll

  • Size

    481KB

  • MD5

    6433a01e81e2d97eef94878e1cd0f381

  • SHA1

    93e9469789a4ecd28e30006d1ce10dbffbd36d7c

  • SHA256

    405813d04b53574ab8c9721795e9fd705273487c852b7f4545fb875da09c7350

  • SHA512

    88f96847bbb16ce171d58123718a55305f163ac94826105ac0f16dc67a6a4ece4079f99b01da7af36cb75faf5d51b2c37223e23a9a64b3b7c6cf5311cef5e502

  • SSDEEP

    12288:QnPbGpOAUlwMDMVqfBdcmDBLJzpV1MfWERME:QnPb+O3lDMVqJdcippVKWERZ

  Score

  1^/10
  behavioral23behavioral24

• • Target

    AsyncRAT v2.1/Plugins/RemoteCamera.dll

  • Size

    168KB

  • MD5

    5b3064600ab1ad728d3384442319c76a

  • SHA1

    b8219b194b4244dee5153808664d1fe5c3270abe

  • SHA256

    9a7228a2f18e18531831915e441831579d67f0466075a3df94096e17adfa4d92

  • SHA512

    5e1d37f4e0a4697668bacd2f4bd7375d16d43c854c7b2db38f52b50ababb72b6143e5c30c6b57e3e78ae3e3060e4d043fb4c1f607f25cbde7697896edb6be54c

  • SSDEEP

    3072:wQDk1rSQ4O/Db4ksmbQUf8Ne1gNCNKKKKyKKKtEdT4woxpCxjmkJw:WeQhUgQVNnNC8x4b7k

  Score

  1^/10
  behavioral25behavioral26

• • Target

    AsyncRAT v2.1/Plugins/RemoteDesktop.dll

  • Size

    125KB

  • MD5

    53d67016fed1d45e2f00fd77c02b1ed6

  • SHA1

    b13cb342b6faaacba0e9d98dfdaf3fd21a31ba2a

  • SHA256

    51b6c6b17b4ee2e99883640e3763c27e48af1fb0562c8e75b2a5a8bbeea9039f

  • SHA512

    8fd6961164702162229684d4a1cb0169e0423c3fab9fd7028bc1d4e74283901c25b09fcf1e3175f686ff937511e157bd91243d86aaefb4afbdd98cf14f4763fd

  • SSDEEP

    1536:ZEIUsJHvUA/loUO5ZexdeodnUstxQbqp3VviJFPYdl9YfcaTYRsCnPgkD8BDgiWy:KsB/a8feMmzpYCMRbPgh1Ys

  Score

  1^/10
  behavioral27behavioral28

• • Target

    AsyncRAT v2.1/Plugins/SendFile.dll

  • Size

    106KB

  • MD5

    61a1eaa8ff6939aa3e3092da71707698

  • SHA1

    8988ee9d1b9e2287082d542ae57bec82cd244749

  • SHA256

    4e47c429c681b3a23cf9bf8cdf60cab79fbeddb88b39b406a61ce21097dd7fe6

  • SHA512

    a2c381de66961ca731e1ea8f9fad854efa7ccd0ef06ec884f9354b8cd65478b7bb26ea7a135751d64322d6fbb6a2680d2664126ca77cac5a9797d8ad936a946d

  • SSDEEP

    1536:t+2tVcjUQ69VPVR/YAJuTHcOTEzQRPnq+FqgYK9mLZRcY1S+X+eqOC5CHBnxjT:Xj+8OeQRfgfCmRS+X+ICUHz

  Score

  1^/10
  behavioral29behavioral30

• • Target

    AsyncRAT v2.1/Plugins/SendMemory.dll

  • Size

    107KB

  • MD5

    53ea349b47e931750088bd7d936e226e

  • SHA1

    9efb3ce1d6ae86c3089695f890d6ce2f29e070c9

  • SHA256

    c419e685c36695d159a06c55d4fe0d6ba4c393b63fa8e74c3241067b205b38cf

  • SHA512

    9f820c71254d6446ba40fb724ba4f1341bc833b5bcfd6054506437ef470f296024d802364fbdcec890b2c89aedb0988cc19101e66e4f4504788ef99bdafd04bd

  • SSDEEP

    1536:HAbgR9lDPeW0yoLQMkZzZnpauHVt8cr+STGA+44ic0DPbLZqtF3hfsXl/9eciJBN:HPlUuj+Eti3hfsXl/Mf93KQJPIIV

  Score

  1^/10
  behavioral31behavioral32