Extracted

• • Target
    676997c2b8774f0c400fe269ddbcac28516014e8a66f7dce7eac30032f7303ae
  • Size 45KB
  • SHA256 676997c2b8774f0c400fe269ddbcac28516014e8a66f7dce7eac30032f7303ae
  • MD5 0337c0290a3aeddb4b7f55547d9fc509
  • SHA1 201138a34b8dc22310b16b781fd91d62f0930a07
  • SHA512 18c5096c3ccdcad3671b76ce141d3c94dce17b2d3a51d293c145a399d1d6595a384d4b8aa0a851d8d0a336ed654cad1f832c7613a741238945adfc91465b1822
  • SSDEEP 768:cu7m/5THrq+CWUoDuMmo2qFCm/9GgrOPIRzjb0gX3iPfEWW6vcxBDZUx:cu7e5TH2A2pm1b3R3bbXSHEB6v6dUx
  • TLSH
    T1C8233B003BE9822BF2BE4F789CF26145867AF6632603D54E1CC451DB4613FC69A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2