Extracted

• • Target
    5e0c5d733bf92b184b9be4cab7512ba333deb19479a776e06e7df51bcd522073.exe
  • Size 45KB
  • SHA256 5e0c5d733bf92b184b9be4cab7512ba333deb19479a776e06e7df51bcd522073
  • MD5 d4bd70d6e2683f82b400ab7e00365379
  • SHA1 a0a6a7fa709e6630015463c2157e6c5e1913d148
  • SHA512 1f5a6d02cf81ce1c00e4538eede066b6e4b302906348745204c4b1fa3a076c3760af73047829cfa69b1a9b5118d6f7784072cb001b6e5d320d09c2edb403d4ec
  • SSDEEP 768:MuBGJTP0BQ0UWUWHaimo2qVJpt0CCMhdjCvS8PIjjjbGgX3ith4aOylcIlSBDZEx:MuBGJTPho2Q/CChBjHbZXStOaOylGdEx
  • TLSH
    T161231B003BE9812BF2BE4F7869F26245867AF2633603D64D1CC451DB5B13FC69A436E9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2