Extracted

• • Target
    eb1d3e65d239395d2a47c195e6e2d0ad6b55501417056075331ae81af9529f8d
  • Size 45KB
  • SHA256 eb1d3e65d239395d2a47c195e6e2d0ad6b55501417056075331ae81af9529f8d
  • MD5 bb6f172d5b3709833a526f28df189fac
  • SHA1 624e082744951603b600457e0ce997be48937b72
  • SHA512 976e3ed9666a8a9c226da1316dcbd3c0be953ae0ecd1727b7bb8971656812ed34ae6fbcfdbd0aaecc45f873f98347986ea7d965f7e1416ba21fd47fed27a61f3
  • SSDEEP 768:cu6RaepTPYzbs8WU+Xaamo2q1nT9Qpm9PIfzjbBgX3i9E5sX1gxt2YzS0kBDZUx:cu6YepTPso2GQf3buXS9EeFASdUx
  • TLSH
    T1B3230A003BE8823BF2BE4FB898F26145867AF5632603D54D6CC451D75623FC6DA426FA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2