Extracted

• • Target
    816c36047401e1daecd7aed7ab92682be8e149b4525745c429ab8fb73b71cbf5
  • Size 45KB
  • SHA256 816c36047401e1daecd7aed7ab92682be8e149b4525745c429ab8fb73b71cbf5
  • MD5 aaae63a7831242dbc7d0e914a503406b
  • SHA1 06bac2ba6e9d3d3140e55aa067a908009f0a9efb
  • SHA512 ecb73de7c7fa63e1dddc07b6f38ec1ab64bef053fec8b70248582f15b41e5a959d119bf3c46348bd2acd2d6b58368ac1ccf6e8d8e6d84318b13d22e955b52a86
  • SSDEEP 768:kuSOpTPTCFcWUeXa6mo2qA810CnMQRPn98PIQ9jbCgX3iWgDVvBDZMx:kuSOpTPOP2MtnbvBQVblXSW2VZdMx
  • TLSH
    T199232B003BE9C12BF2BE4F78A9F26145867AF5632903D64D1CC451DB5723BC68A436EE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2