Extracted

• • Target

    8d30a30ff9b086ccb05f68a4297f73cdc252d2e847dfd3eee35e770c25d99689

  • Size

    74KB

  • MD5

    8426efde5119f38f7436dc6170635bae

  • SHA1

    1f68a03059e2b27b1b4529f906fe7336a743b2ac

  • SHA256

    8d30a30ff9b086ccb05f68a4297f73cdc252d2e847dfd3eee35e770c25d99689

  • SHA512

    8c1a0338f9b53657866eb5b8f2b1e9a736877ee599a38ad6c956eec2062a4b62501b03893b93d9995c062f8c90fb7901ebdf4b3a4ef2a3944629cd47f9df7e57

  • SSDEEP

    1536:Vu2/0TceH2or2NWvKnNzebe9p0fYtr1oJdoeZ5/EAH5tO:Vu2MTceH2oKEinNKbe9uY+SoltHTO

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2