Extracted

• • Target
    33fae569789789a91bc5ebde7545ac87a9d1a812a8917e2043ffdae1538dde2b.exe
  • Size 45KB
  • SHA256 33fae569789789a91bc5ebde7545ac87a9d1a812a8917e2043ffdae1538dde2b
  • MD5 8a3e93d868a2efbe9703472dd9f62928
  • SHA1 f4eec48d8a24232b5d683ad29ef643141fa7c1a8
  • SHA512 f73c51eb145520a56b875508d1ff44bf514d46db879c085bccf141ca93b8ec5a47fadc224752435876756b2d14c1b7664888a796a03245d84d2edfc55b3b09b4
  • SSDEEP 768:MuBGJTP0BQ0UWUWHaimo2qV/Ao0p54mcPIEzjbCgX3ibSZjUp+CKOLZRBDZEx:MuBGJTPho2kADv4mhE3blXSneadEx
  • TLSH
    T110232B0037E8853BF2BE5F789CF261458A7AF6632603D64D1CC4519B5623FC68A42AFD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2