Extracted

• • Target

    0x0008000000018bf3-14.dat

  • Size

    45KB

  • MD5

    ece45103465f781d48cdc41a19e7d9cc

  • SHA1

    d7025037bdf2bfb09b3797443ae00d8dbddd4eb7

  • SHA256

    bb6af8f4ac8ab6c14b159b578a5097ad5d7827751230595dd3b2a3c767f3d869

  • SHA512

    4e14419240dbd8ebba468afddf48a70df9d6a55ceaa149eb5873d99aac32eb0aaa5e536791db88d0bdd908eeab6b89d8901687be868ff3b9b0a0b841333f6b15

  • SSDEEP

    768:vuivNTdFHLBWUZiGrmo2qrrKjGKG6PIyzjbFgX3io7OoZp28aFJuvnBDZjx:vuivNTdBR2mKYDy3bCXSUOcta7uJdjx

  Score

  10^/10

  asyncratmarch-25-5discoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2