Extracted

• • Target
    c87a94cf491e90f39e2eba499aff68d68a18e596d3953f506d749c0b1587fda8.exe
  • Size 45KB
  • SHA256 c87a94cf491e90f39e2eba499aff68d68a18e596d3953f506d749c0b1587fda8
  • MD5 813c132fe61c521f0967751c8526707e
  • SHA1 d9826fb9407627828e9cf9a5bc0b830d5ae6594d
  • SHA512 ddc8cf1a83aced71166bc21ffc2ebdba927420aae30b563f8e77e4f361e5a60eed8e3027f4cdc10fd606867c7e534de92d8366b33a8b89da34f0deee8ef29d20
  • SSDEEP 768:0u1YJTHwAUgQWUaT2Wmo2q9e/rs4PJZOPIc4zjbkgXZixs1Mlo7NBDZ8x:0u1YJTHcw2RwUf3c43brXoxs1M+7Dd8x
  • TLSH
    T164232A0037E8822BF2BE4FB89CF26145467AF2673602E58E1CC451DB5613FC69A526FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2