Extracted

• • Target
    295e274959dd89f2944309a861bc453527cace649023713a4050368d5fee4723.exe
  • Size 45KB
  • SHA256 295e274959dd89f2944309a861bc453527cace649023713a4050368d5fee4723
  • MD5 6efa915413a0bf1d348a4537dbae669e
  • SHA1 31a12c447a26fe71194f390026a88ccd45966110
  • SHA512 4b48e366b7ed5ac7f325b84690c08788dd80f00d91c00d7b868a465ac57a56a6a3ba75ca35c0ec555db205813a39066061460f7449594f052bd3544f49a45126
  • SSDEEP 768:kuSOpTPTCFcWUeXa6mo2qAhpt0CCM+d4CvS8PIkhjbEgX3iYGl0B9CHZo62BDZMx:kuSOpTPOP2x/CFWBkxbLXSYGqLihYdMx
  • TLSH
    T146232A003BE9C127F2BE4F7859F26241467AF2672603D64D1CC451DA5B13FC59A43AFA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2