Extracted

• • Target
    d09a613c56c23ceea6d4ec70bf2a860fa3787e94866f4b3cf5f624f5be3392f5
  • Size 45KB
  • SHA256 d09a613c56c23ceea6d4ec70bf2a860fa3787e94866f4b3cf5f624f5be3392f5
  • MD5 4bfb8f1edaca558ea94bf6a73687eae2
  • SHA1 9634477c5c18afd5fcd18d3202ffe7ebf786b5ab
  • SHA512 9990d9f908660ce56ae1e0e467bf9da77c0379ea48048a6205a2f704c8aef292438c6bb08a4deed7f45e03099ce09532f6a1998bf23f7ac90565af92b9fc63e9
  • SSDEEP 768:8uuSpTg7GBoWUSH6+mo2qYlCSwTMjPIu/jbqgX3it6+N94AoEHO4NBDZ0x:8uuSpTgyf2dg1uLb9XSt6GxOEd0x
  • TLSH
    T19B233C003BE9C12BF2BE5F7499F26245857AF5633603D54E1CC4419B5613FC68A42AFE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2