Extracted

• • Target
    1ba5f4a1e64c2c2251d335501040dd4281fbc2d26d32792d36a9da5a95f5c4b8
  • Size 45KB
  • SHA256 1ba5f4a1e64c2c2251d335501040dd4281fbc2d26d32792d36a9da5a95f5c4b8
  • MD5 6c47f6f02a5f7b4bacaad3949ffc8d7d
  • SHA1 e228973d9972206f53e578b270970b293e6ae78f
  • SHA512 25b1ddeb819fb697fb071ad8b62dcec8cc67331f48217ed58ec144f6bc843e864d73c455ff5a019e6c7cd44172a2e864a9a0da3eec76af82c622b097b9ff2b74
  • SSDEEP 768:EulCJTHESwgWUK3aGmo2q9ah5BewwbOPIMQzjbIgX/ihSwJb/F+BDZsx:EulCJTHl4219F23MQ3bfX6DBFQdsx
  • TLSH
    T167232B0037EC812BF2BE5F78A9F26145867AF6673603D68A1CC4518B4713FC59A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2