Extracted

• • Target

    7b8f49ee16e33842749de6145dbec03a13ced02717ad905eee2d88e59718f455

  • Size

    1.3MB

  • MD5

    b2176882f0392c4bf65d78beca48cb93

  • SHA1

    30b824d0c169dd45272abb85e03573d19acbb416

  • SHA256

    7b8f49ee16e33842749de6145dbec03a13ced02717ad905eee2d88e59718f455

  • SHA512

    54b3bacc09848691c9b9f011d33e8e769673b49454bec3c546f86e353524831af72920f6b0ac66356e2b551957a6e304d480e7c256c9e1e2f22f9dba5ed4b013

  • SSDEEP

    24576:2YVxlmFfqq4BNH8Ar3MVFGEkBvSbaliqOpr:txIWpRMV8PNxUr

  Score

  10^/10

  asyncratdefaultdefense_evasiondiscoveryratupx

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Obfuscated Files or Information: Command Obfuscation

    Adversaries may obfuscate content during command execution to impede detection.

    defense_evasion

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2