Extracted

• • Target
    eb70ee68a91f700b4c03b73387a499975ddb92ac126e613c35064a9f8b5a1c5c
  • Size 45KB
  • SHA256 eb70ee68a91f700b4c03b73387a499975ddb92ac126e613c35064a9f8b5a1c5c
  • MD5 1511e9821d637b7335c08cf69a895e39
  • SHA1 af7dc4c475bd67d2d6751a103a95c8f1a74fa7d5
  • SHA512 a9971573519a4144353fa23127f78374d260d5c1a3bddc6953bfec81ba6d312d976ee561279be1c78b9937e788405e8671c4e3e90fd20b2fb89bb0dbda3787c1
  • SSDEEP 768:nuuZ5TbUo/BWUlf+DHmo2q7ZGFZQjB4PIFfzjbZgX3itwptsLyc9C2QKBDZ5x:nuuZ5Tbjst2bqF9Ff3b2XStwptOCFUd3
  • TLSH
    T1F32309003BE8812BF2BE4FB89DF26145867AF6633603D5891CC451D75623FC69A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2