Extracted

• • Target
    796bb8e16dc7e0856a3974e7cf6ba6796c28a4a8ad6719233c77475c30714b99
  • Size 45KB
  • SHA256 796bb8e16dc7e0856a3974e7cf6ba6796c28a4a8ad6719233c77475c30714b99
  • MD5 edf1896def74a0f588e0477143f2229e
  • SHA1 c9054f13c55776ed0bc468381eed38570535fac3
  • SHA512 99fd11f377d0c2703048b22016774085f7bed1917bf5414538c6ff385ef1f24dce7264f63fdb7e26e4f73129b33dc64411907869034c1acf2b08869f855b57c8
  • SSDEEP 768:EufspTfzcR6uWUcb+wmo2q9T9oSsqHz1OPIqzjbvg63iw1ZrP8mSoI4TBDZsx:EufspTf2g2OKti3q3bY6Skl09f41dsx
  • TLSH
    T175232A0037E8C12BF2BF5F789DF26145867AB6632603D64A1CC452DB5613FC68A426FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2