Extracted

• • Target
    4d80b9b34941c9d35ae2173cafe22bce8c892023c3ddae252a452ac4069dd4dd
  • Size 45KB
  • SHA256 4d80b9b34941c9d35ae2173cafe22bce8c892023c3ddae252a452ac4069dd4dd
  • MD5 bbd96af33223744cd27b71aeb2e30883
  • SHA1 4b3f90a4433715d8d6ec5ee3e7cf0babc4425ee7
  • SHA512 9e3574290031ec6e7451e980531ff987bd39230d2090d4f4de49273e46b29db1a384add3418dccb35376b34fe28fbef883554141037f3465ebb21fb9db096354
  • SSDEEP 768:suJdpTP3tcsWUODmqmo2qVTH6cU3APIpzjb1gX312hkZfkZ/6xmduBDZkx:suJdpTPdI2WaZ3lp3bSXl2hkyZSxmdgk
  • TLSH
    T1EF232A003BE9812BF2BE4F78A8F26205467AF6637603D64D1CC451DB5723FC29A526ED
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2