Extracted

• • Target
    4adda91b555989ef150e811f0363b7790c512f40f718903d8cd95812ded892d1
  • Size 45KB
  • SHA256 4adda91b555989ef150e811f0363b7790c512f40f718903d8cd95812ded892d1
  • MD5 c6bb8cbf47cf90a25b60e8f96cff7ebe
  • SHA1 6fa4243b26616b3f0edbe6f65e43b60881ce8b5b
  • SHA512 066e279fd312b15795d60ccaee0a055ce771c338361cb8ad48e4126f1a012c989e1029dfed5430106a9625a787c61ea78311bc956924c0ca6d61a63a853efec4
  • SSDEEP 768:ku40ZTX3uXTaWUgzW0mo2qwnZTohEaSPIgzjbXgX3icT0QXSl4eD+KeSYBDZMx:ku40ZTXEb2d4Ea7g3bwXScT0QG4eDE98
  • TLSH
    T1CF232A003BE8812BF2BE4F7899F26145867AF5637603D58D2CC442DB5613FC69A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2