Extracted

• • Target
    6b3276de5fe08dc52a1d56e322ca27bc53d8854400d838168de857b4a6eff1d4
  • Size 45KB
  • SHA256 6b3276de5fe08dc52a1d56e322ca27bc53d8854400d838168de857b4a6eff1d4
  • MD5 50b5086b16e0eefc3e9b672dde09ee94
  • SHA1 280f6073d574db9444de9a27661d8eebdf289230
  • SHA512 75f32fefeae4d52a95b5f01b04b57301dcdfd7252e89384c31ec6a8f77b007431fe3179009909509258cf506125e07083b291a3bd1127fbc1699f6a6ee1390a8
  • SSDEEP 768:cuq04JTLcsP8EWUmOTymo2qAO8V1RpPEcPIMzjbQgX3iHi+tQevz3kl8t0d6EBDg:cuqNJTLr62e8VDZEhM3bXXSHiAQeoFX0
  • TLSH
    T1C0232A003BE9822BF2BE4F7899F26285867AF2637603D54E1CC0519B5613FC6D6426FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2