Extracted

• • Target
    cef15dc1e4d2b11d74ac654e63eb7b52c20703a9309ff826eeedebb252ebc9a6
  • Size 45KB
  • SHA256 cef15dc1e4d2b11d74ac654e63eb7b52c20703a9309ff826eeedebb252ebc9a6
  • MD5 b18821daf05931da33f6da9f9e32ec37
  • SHA1 f88e1883bd43bd5e8aeeea8cba75f32f2da02d1c
  • SHA512 fa15abbdb397ad2a201566e54414634ac2346422251641e3b8f248b8116438b133cad5be5118e1f5b4b2c158de19dcd168036d91fc37f3853455ccc52cdb097b
  • SSDEEP 768:kuSOpTPTCFcWUeXa6mo2qAH8kLyuOcvukwZPIfzjbNgXCiYPL7b8AAiN6eBDZMx:kuSOpTPOP238LudlwWf3baXrIL7oIkw8
  • TLSH
    T167233B003BE9812BF2BE8F7899F26145867AF6633603D5491CC451DB1A23FC6DA426FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2