Extracted

• • Target
    c017a04b0a514972727fbe6015c2b9d40d2ec5a6b47e11aef84f602da388b9d7
  • Size 45KB
  • SHA256 c017a04b0a514972727fbe6015c2b9d40d2ec5a6b47e11aef84f602da388b9d7
  • MD5 5552319c4a1d0c69af852dea0113e244
  • SHA1 b56a9c4cae29e21d583b4ea187625f4acd967f89
  • SHA512 a6201e38bbebec390b81925b078746698868d20321b4e2d254a5072c3e9d8fe502b513a0c75ab8a0d57bae0758eb06cf77165fa0bf2e244c2df6a5e0104b532c
  • SSDEEP 768:suJdpTP3tcsWUODmqmo2qV2maPcl83APITpzjb9gX3iSNV5d6oNg5mv+PBDZkx:suJdpTPdI2HfcS3lTp3bqXSGIgz+5dkx
  • TLSH
    T1ED233A003BE8C12BF2BE4F7899F26145467AF6636603D64D1CC852DB5623FC6CA426F9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2