Extracted

• • Target
    eca16088a0e71443c85c8bb6efd6cc3ca6ecd483a1b64222fc20c95f4213a6af
  • Size 45KB
  • SHA256 eca16088a0e71443c85c8bb6efd6cc3ca6ecd483a1b64222fc20c95f4213a6af
  • MD5 4a0e5d712fa44d346e21317669f50b4d
  • SHA1 e2a65c177b10281c0c72af7268101e944b35eff6
  • SHA512 745954f254460a714c7c29e60873896e5156cde1bb57f7d1fba2d0deeeebcd2462748c9819c511527143db4f67828a686ebbab4bda839e964fd18dcfaf053161
  • SSDEEP 768:ku40ZTX3uXTaWUgzW0mo2qwP3FoDEaOPIqzjb2gX3im+SknUaBDZMx:ku40ZTXEb25KEa3q3bpXSyknhdMx
  • TLSH
    T17D233B003BE8C26BF2BE4F789CF26145867EE6736603D58A1CC451D74613FC69A426FA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2