Extracted

• • Target
    01319769015829df916009d04b401c47a5d719a91527d43eeac089452589dc53.exe
  • Size 45KB
  • SHA256 01319769015829df916009d04b401c47a5d719a91527d43eeac089452589dc53
  • MD5 5b494c029ee8d2233989004289667da5
  • SHA1 5c7b6f3fc19bbe8499755951482408cccf61f603
  • SHA512 06d7148c65f65bb04ea941f3eeb9aeb5a62a103c7baf5f7a5fd4fcdd4236cc1cbb48a280fa468a31e01679366ba9fc436d10793a5016a08b7f9ef15a6f66b31c
  • SSDEEP 768:8uUIpT4vvofWWUEXb+Imo2q4D9YSkq/zNOPIFzjbigZ3iJWU244MA8EzkBDZ0x:8uUIpT4vAj23aVC3F3bFZSJt24BrEzSU
  • TLSH
    T14A232B003BE9C12BF2BE5F78ACF26245867EF1633603DA4A1CC451975613BC68A526FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2