Extracted

• • Target
    46dc4c85c697c6b600a20504293503a851d1e5e01e292b3993e7348d25363057
  • Size 45KB
  • SHA256 46dc4c85c697c6b600a20504293503a851d1e5e01e292b3993e7348d25363057
  • MD5 2c518562c9eb1745f0b19b7ab456060f
  • SHA1 091d2ef5c17d112446586dec8b024de383e52da7
  • SHA512 2bf96d3f00eab53529ec9f8cc29b9680f9d6ea18290668d5e0554bf916b57a12774c458c56ba5eac3900aedd4e103972443c2ccde3023dce9abc7f74325fa8e6
  • SSDEEP 768:vuogpT78XvEsWUOsRzqmo2qrXmaPylF3APIFzjbLgX3i5rtMjP83UZ0vOeVjGBDQ:vuogpT7I62Ifyv3lF3b0XSvTvL8dkx
  • TLSH
    T1902319003BE8C13BF27E4F7899F26145867AF2637603D64A1CC452DB5623BC69A426FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2