Extracted

• • Target
    6bb470d3efae5292d88db1805424a11159ef403d38c54e76a39343d69956cca5
  • Size 45KB
  • SHA256 6bb470d3efae5292d88db1805424a11159ef403d38c54e76a39343d69956cca5
  • MD5 a71205314c9d22178e65a1c59d2bf707
  • SHA1 850c7f39e7e9a44d239e8b56782b01a7e056de2a
  • SHA512 1cee86dffd677b58635fd48235ca633a75f94ab58c93f6ed9a198c7891b408fc47392dddfe04a2c125ae04d05f82be9ebb150f25e2fcfdd24e742328bc91ebc4
  • SSDEEP 768:EufspTfzcR6uWUcb+wmo2q9Aozfy3CKPIDgjbHgX3i9jteqKqx0BDZsx:EufspTf2g28TRDIbAXSh4qodsx
  • TLSH
    T1E5232B003BE9C12BF2BE4B789DF26145867AF6633603D64A1CC411DB5613FC69A42AFD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2