Extracted

• • Target
    858f9d8c7c9329a6f9915d0d945b3dc74ebcb8759363845b08241318bb38f21b
  • Size 45KB
  • SHA256 858f9d8c7c9329a6f9915d0d945b3dc74ebcb8759363845b08241318bb38f21b
  • MD5 a61b2f9b9a99aa90740cc348b2f7d4ee
  • SHA1 0440eef65bffbff9469bef147cbc87c163d9cbd4
  • SHA512 22e323d1cca237ffdf03737973ba9c77f3da6a3328efdd8d4bb2b851404e692fe0082b0c48d6457a40731a580dcf7840882ede2485f600daf8d80c054addda81
  • SSDEEP 768:MuBGJTP0BQ0UWUWHaimo2qVcqyE0OFUwdJxIkDPIizjbagX3iubcNnuKFqZsrrBE:MuBGJTPho2tqNTLMi3bNXS1NnFF9dEx
  • TLSH
    T126230A0037E9812BF1BE4F7469F26245867AF6736603D54D1C8451DB1B23FC68A42AFE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2