Extracted

• • Target
    52cd239a26067f4a2ed9cfd3bf54ae799f4eb96f3ad1dbecf693d4c8ca9c823c
  • Size 45KB
  • SHA256 52cd239a26067f4a2ed9cfd3bf54ae799f4eb96f3ad1dbecf693d4c8ca9c823c
  • MD5 9ec5b7c8222875ab31cc7990fc47beed
  • SHA1 83a2b74b9266ae24a5324fd0c3664c4499c334e8
  • SHA512 ba94df2e4af8e286066452319f08697a4c1c0ad7a90bb13bc80e3a59be557504c3c253a534bf27e08c8a8584601b2638c8c592e67436b3525f03ba76daf86d51
  • SSDEEP 768:Iu6RaepTPYzbs8WU+Xaamo2q1m0UwPOlehAPITpzjb1gX3irRhcl0Z+tvmyBDZox:Iu6YepTPso2/0/OghlTp3bSXS9+Ndox
  • TLSH
    T119232A003BE8812BF2BE5B7898F26145467AF6633603D68D1CC4519B5B13FC69A426FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2