Extracted

• • Target
    5b2db3877743d32c5075ea571283392872b553ef821f278d920583248420a1e1
  • Size 45KB
  • SHA256 5b2db3877743d32c5075ea571283392872b553ef821f278d920583248420a1e1
  • MD5 c198bc3f63f07439bade4ba5d8895277
  • SHA1 bb3360f028a9fd8850174f693ff632bbc3145b01
  • SHA512 f2747ea222620b5f44e43cc351b0c74dc1a9d571c3b0d0240fb3f4fcad25590a901d455e0dc475ea7d830ded79053dfc7671a6a0612d7ea178300cf32e7e65ce
  • SSDEEP 768:vuogpT78XvEsWUOsRzqmo2qrST2Qpm7PIGMjbdgX3idk2QSFT5UTanY3BmBDZkx:vuogpT7I62EeG8bKXSdkIR43Bodkx
  • TLSH
    T190230B003BE8813BF2BE4FB898F26145867AF6632603D6496CC451D75723BC6DA426ED
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2