Extracted

• • Target
    16dfa690aabac5f979f30cb5b582c3794eb426fc9a20ec6b9bfc87a268b74b3f.exe
  • Size 45KB
  • SHA256 16dfa690aabac5f979f30cb5b582c3794eb426fc9a20ec6b9bfc87a268b74b3f
  • MD5 fd1de60fde8c7278472d634e7c9a1e62
  • SHA1 7b012892660ffbb4d65232aeffd1e2046a3b56ff
  • SHA512 d96c1d7b541a55bf5db26a77d57652904b14929390cff4f44ea21cd7702bae759c6cb02e716b58a1d042b04218d6cab26dee2f2ff7f69290892b46101e04953c
  • SSDEEP 768:0uJlpTP3tcsWUODmqmo2qVD0e3+Kv18iZPIezjbAgH3iL27VpKfzBDZ8x:0uJlpTPdI2q3T6iWe3bnHS8qd8x
  • TLSH
    T1BC231A003BE8812BF2BE4F78A8F26145867AF6672A03D54D1CC451DB5713FC69A429FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2