Extracted

• • Target
    3ef5f3f3adff4fe32ec53191b38e6225e0c5e4dcd118cbfbfd145da23cb37962
  • Size 45KB
  • SHA256 3ef5f3f3adff4fe32ec53191b38e6225e0c5e4dcd118cbfbfd145da23cb37962
  • MD5 fa24a2af571a5a79f63deb7990352731
  • SHA1 7f326861468608020175a5e07bf76f90a089ad7b
  • SHA512 7204ba4fd363690f84d2e59443f803e42d37a09e6fbe00fb004e3192f0f0b4a48e429504aeb94cd2f2bd2c48da9ed886ee6d5950da89651c70e65acba369dd17
  • SSDEEP 768:MuBGJTP0BQ0UWUWHaimo2qVufPLziObvtkjZPInzjb2gX9ii7y2Yc+wDmHBDZEx:MuBGJTPho2HfHiyyjWn3bpXM72KhdEx
  • TLSH
    T120232B003BD9812BF2BE4F78ADF26245867BF6632603D5491CC451CB5613FC68A42AFD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2