Extracted

• • Target
    cff6a57d42d3746c7be422313aa5f504f4f940ad359c3ccc2af5705066f6ee3e
  • Size 45KB
  • SHA256 cff6a57d42d3746c7be422313aa5f504f4f940ad359c3ccc2af5705066f6ee3e
  • MD5 2b6ae814fa5f2a74b3492670d170edde
  • SHA1 115d09566c53cb8cba8fac9bc9a796baf0aefd23
  • SHA512 e74568f2d8dc72dbc671a46495fe70677534222f5551c5bbf79382484e2c6961ffd9a39ce8333f7a1eeb6ce7ee50ab00f3824df57e1c980d079609c3546d009f
  • SSDEEP 768:Iu6RaepTPYzbs8WU+Xaamo2q1m0UwPOlehAPITpzjbUgX3iX+m+CkncO+cCeBDZa:Iu6YepTPso2/0/OghlTp3b7XSX+BXnpI
  • TLSH
    T1BA2329003BE9812BF2BE4F7899F26145867AF2637603D64D1CC451DB5A23FC68A426FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2