Extracted

• • Target
    32ac00f0a3ea85f89ff97e89a98a98d3fe99a2dd7891761fa73aab8b5c6e5654
  • Size 45KB
  • SHA256 32ac00f0a3ea85f89ff97e89a98a98d3fe99a2dd7891761fa73aab8b5c6e5654
  • MD5 27a264230c2fe6fb638840749a418d13
  • SHA1 22334d46cebf1cbf088c68f09db727867d13a1e9
  • SHA512 21bd890d04b28d7cdb0c492b7ab6c17656d83a28d4cfeba430b09c0d73f977d2932ad7f07d611173c1cbf383001251cd21b596ba217b2ff1d79d0f9a3a4d21bd
  • SSDEEP 768:UuKWgSJTwU6NkWUGnaSmo2qAfmaPclm3API7zjbZgX3ifSj5dQL6sfoBDZcx:UuKWgSJTwRf2vfcE3l73b2XSf2AL6sfB
  • TLSH
    T1AD232A003BE8C12BF2BE4F78ADF26145867AF6637603D64A1CC451DB5623FC686426ED
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2