Extracted

• • Target
    b00a4eebd9eaf0a5c93fdf32956b2233ee7f693bfce62864a30d3f8a03a00df3
  • Size 45KB
  • SHA256 b00a4eebd9eaf0a5c93fdf32956b2233ee7f693bfce62864a30d3f8a03a00df3
  • MD5 34449792e7212c4f475aae1d084e6289
  • SHA1 1952ebd9897245749218e323ba6bafe7c5d036e2
  • SHA512 3d787740d618128babe6dc45f680f33449aabf87e5e6e6a0fd0c3dc75fc902b3e6f2b8099fc15244d9850817d21e02c946c86f20b776beb057b65439a2383579
  • SSDEEP 768:UuKWgSJTwU6NkWUGnaSmo2qAmmaPol53APIkzjb7gX3igdkIc2JEn4MBDZcx:UuKWgSJTwRf2Wfob3lk3bEXSgrdKdcx
  • TLSH
    T1B4231A003BE9812BF2BE4F78A9F26105867AF6636603D64E1CC451DB1723FC6D6426ED
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2