Extracted

• • Target
    ac6aa6596b9c7a478ee5151d8375f54ef879c839f5922e18e1af3f76ed11bd8e
  • Size 45KB
  • SHA256 ac6aa6596b9c7a478ee5151d8375f54ef879c839f5922e18e1af3f76ed11bd8e
  • MD5 600196e6ec6a6ab4203448276222afbc
  • SHA1 abb39f4de9fc96d12ec422555d0116f359f27c2a
  • SHA512 c3d2d472173b2d525139c43a87707b1848539ccdb0e95879614b7450d6a685b7774cf938afdfd0d5916b00eebb02864b3ac54e68bfee08eb0c96ae9d9741a90e
  • SSDEEP 768:suJdpTP3tcsWUODmqmo2qVGonysV3APIXzjbAgX3QEvO+RVP+YBDZkx:suJdpTPdI23NI3lX3bnXgsOGIedkx
  • TLSH
    T1A8232A003BE9C13BF2BF4F78A9F26145457AF6636603D68A1CC4519B5613FC28A42AFD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2