Extracted

• • Target
    ac8aea4b6ec126d5c0c6d02eb814208d481756ad2b587844f674f1090393b780
  • Size 45KB
  • SHA256 ac8aea4b6ec126d5c0c6d02eb814208d481756ad2b587844f674f1090393b780
  • MD5 0077839163b9c830a5aa8bfe8de0db5d
  • SHA1 197e58ac06c36b4bd108dda72841cee76751e9aa
  • SHA512 0576b67abaa05cb15d339ced3ac4a0e881dbfc753e3a933c5efe2bd3c7c1adcb7f2579de87045137f63eb28fd9d19da5e258e920ea4dfc997e72954770a27d6e
  • SSDEEP 768:EufspTfzcR6uWUcb+wmo2q98zjHy/aKPIbJjbWgX3iuyepJkPYUfsjwBDZsx:EufspTf2g23nhbpbJXSuyepqAUfsCdsx
  • TLSH
    T1B8232B0037E9C12BF2BE5F7899F26145867AF6732A03D64E1CC011DB5613BC68A526FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2