Extracted

• • Target
    dee2cee83ca5d95d5273dd2dbc10aa15b04f7f3364702590331920f21db249dc
  • Size 45KB
  • SHA256 dee2cee83ca5d95d5273dd2dbc10aa15b04f7f3364702590331920f21db249dc
  • MD5 f7e0080430d6f58a2b799527124b8bb9
  • SHA1 74dd7152d790dc59927e04f032888af67c359354
  • SHA512 e09894cdbfbb88085ed289655fcbaad4f269b4b046473263f8955db7853031f0353bd67055246f899a7b4262a156ecbc2d6366113e3e9efe1717e4141b800b4a
  • SSDEEP 768:vuogpT78XvEsWUOsRzqmo2qrmFpPklON8APIDzjbTgX3iX/j/31hDsBDZkx:vuogpT7I62F7kwN8lD3bMXSPj/7edkx
  • TLSH
    T1182329003BE8812BF2BE4F789DF26145467AF6637603D68A1CC451DB5723FC68A426ED
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2