Extracted

• • Target
    928cfcdab37879c49b895e32c78d082e199829f1743c041d8708402b237c2d1c
  • Size 45KB
  • SHA256 928cfcdab37879c49b895e32c78d082e199829f1743c041d8708402b237c2d1c
  • MD5 c9777301f37e6cb8a4d35dacbe9f4781
  • SHA1 a0e23427894e59f723f1442faf4a85561b8e9996
  • SHA512 6acf47b4be8e8b3d2a3fe18bff49070915f9e1b197bd615fddd9b3357237d8dd4334ac438e2955815a3fa1772a62ee2fad773c39e539a5b7c9da78bf1a0f50ed
  • SSDEEP 768:cu6RaepTPYzbs8WU+Xaamo2q1/onDld3APIQzjbngX3fvndxbWFFBDZUx:cu6YepTPso2uUT3lQ3bgXPvnvoLdUx
  • TLSH
    T1B0232A003BE8813BF2BE4F78A9F26245467AF6637603D6491CC451DB4623FC69A426FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2