Extracted

• • Target
    a5865ac8bc6ac9905661a03dd82bcf9a0f7bbc311c1924ec0079a862c1d608c2
  • Size 45KB
  • SHA256 a5865ac8bc6ac9905661a03dd82bcf9a0f7bbc311c1924ec0079a862c1d608c2
  • MD5 2736b1605aae5c9fd35b7f2150485a83
  • SHA1 d358eb5c8e20192b91d502045a5c0b1c5dc52041
  • SHA512 73db3974c1b6709f3a438203b122271094caa042edb2831aa313a030384a0a72cb41c03df3b61ffd209570ebc9c4939eb785f554982dc3e739237d7002077998
  • SSDEEP 768:0uPrpT/LGKeWUszuAmo2q9NOSowiqCNjPIPzjb9gX3Z/WUNwqkH0ZVqoGrBDZ8x:0uPrpT/qY2cOSzCKP3bqXJ/WUN+H3d8x
  • TLSH
    T1AA232B003BE9822BF2BE4F7898F26145467AF6633603E54E1CC451DB5713FC69A426ED
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2