Extracted

• • Target
    95a8cad9eb229cfcf00c37a10a9ee5528b3bb74d68ee62d21d6e34e4dc11068a.exe
  • Size 45KB
  • SHA256 95a8cad9eb229cfcf00c37a10a9ee5528b3bb74d68ee62d21d6e34e4dc11068a
  • MD5 b77049c4c5a5c07f43703c8b770a4cf3
  • SHA1 e3fbfa661df29590ee6fbcba4a82ad1c4c4fc698
  • SHA512 27ee7ccf899c62bbbacf9320a32ae185b1f2bc1dda663a8187e6b72821401884a91b878a9120bca11bb396a50ba46e63ee7940dfc3686ac49dbb2815fcbf3658
  • SSDEEP 768:MuLAZTnAkuSWUYzG8mo2qFOeeXK5oibbb6TN8/nPI6WzjbLgX3iQ09AjMq2ItBXT:MuLAZTnbg2aeEqTNKA6W3b0XSxGjpntp
  • TLSH
    T152231B003BE8C12BF27F4FB899F261058A7AE6632503D55A1CC4519B5713FC69A42AFD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2