Extracted

• • Target
    87e9955b33fd951486a4e8366105d847707cb4ea6f1a0ff7bf9c43bbe2746a5b
  • Size 45KB
  • SHA256 87e9955b33fd951486a4e8366105d847707cb4ea6f1a0ff7bf9c43bbe2746a5b
  • MD5 932c5ac11b38233ce7b9e9edc2e86046
  • SHA1 9d9b038f32008b74158072c41e5e538f6347642c
  • SHA512 b1bb335a0c782c5f324affaeaa898982202f742a0018925f3a6cd03852440dd94b0b43ee0311ad1684f3d348e467565f16fbf387120f135d431e2a64c0b7cfc1
  • SSDEEP 768:cu6RaepTPYzbs8WU+Xaamo2q1LT2QAm7PI1Yjb5gX3i68KvkNlBDZUx:cu6YepTPso2JT1QbWXS68KvadUx
  • TLSH
    T1322309003BE88237F2BE4FB89CF26145867AF5636603D54D6CC451DB5623BC6CA426FA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2