Extracted

• • Target
    3282bf93844f695a65abe44f5c44834206ab168133f09d9d17c52e6087977092
  • Size 45KB
  • SHA256 3282bf93844f695a65abe44f5c44834206ab168133f09d9d17c52e6087977092
  • MD5 d731385b5d789d784a670ad9a12a6ce6
  • SHA1 a371c7ceff6d5f434065cf2e4ef03206a2ea343c
  • SHA512 ab71e6ea8418f69e32f1fa517db3b8f21ef0dfb7d5f5551f88cfe0bdbd0cc0d8c024b69be43acb5a5e971bad15fb3c5a9b604414418a3c47409dc18310a7cb73
  • SSDEEP 768:kuSOpTPTCFcWUeXa6mo2qAUg0enWbcKnCfPI0zjbogX3iQLMtilzxR26MltaBDZO:kuSOpTPOP2ESnyq403b/XSQi0zxQtEdO
  • TLSH
    T162232A003BE8812BF2BE4F7898F26145867AF6736603D6491CC451DB5613FC69A43AFE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2