Extracted

• • Target
    dbe39dfbccef184b355a7427b06c014268d20f689591c21496c794fb7ed0f510.exe
  • Size 45KB
  • SHA256 dbe39dfbccef184b355a7427b06c014268d20f689591c21496c794fb7ed0f510
  • MD5 0871296e5acad70961028a966fd17be8
  • SHA1 2cd44c201fb6b2ea17f8dd152b09811bc82fe930
  • SHA512 f4c60c2dca814003300800c0d398f83b1349884adad38b3d7426b128c27ee70b63970b15c2baaf742ea85f64dd9f3b1e8386a1167aafc45536e63d5e7f60c169
  • SSDEEP 768:cu6RaepTPYzbs8WU+Xaamo2q1mGsGx8OHuPI2zjbpg43i98rLKPSh2H5TGcUBDZW:cu6YepTPso2rez323bm4SqppdUx
  • TLSH
    T102231A003BE9812BF2BE4FB898F26145867AF5676603D64D2CC441DB5623FC6CA426FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2