Extracted

• • Target
    e1157f1cbcec4a60e5288b9a80407a55c632c36c7208d116a371cdf763a2fa3b
  • Size 45KB
  • SHA256 e1157f1cbcec4a60e5288b9a80407a55c632c36c7208d116a371cdf763a2fa3b
  • MD5 fe83e4010a93a1a7016d037821227e4f
  • SHA1 413be1584fb4f271a61ab38833d7385970fbd422
  • SHA512 274930c109108b60a7a57995e6eb025c0aa1dbb8f0a5cee0ed88e6a358e7fc165b030e5c9beeaffc22a420e87fef6478b90673dc39635dca4c65cea68aeb46e8
  • SSDEEP 768:MuLAZTnAkuSWUYzG8mo2qFHNd3u40cMOPI08zjbcgXfiIigZGckBDZEx:MuLAZTnbg2Y8+M3083bzXapgUcSdEx
  • TLSH
    T154232A103BE8812BF2BE4FB899F26145467AF6633603D64E1CC451DB4623FC696426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2