Extracted

• • Target
    645ba06007c4a80d4d7474b5c3f9333a3bb4df00b081756ad8c564ee7f3f9595
  • Size 45KB
  • SHA256 645ba06007c4a80d4d7474b5c3f9333a3bb4df00b081756ad8c564ee7f3f9595
  • MD5 683a68179dd020f22e8bde8e2c8635c8
  • SHA1 5de8efa13822643a955080b51a295e083712ba4e
  • SHA512 1132b1cd1a4cf67754edf6c99766d8615b6d6e3e8c48a47fb7fd379d727a709bd32f121b8d28df03d44b7e1ba6f642b5aef8147a9eacd134541f57fe183b7c55
  • SSDEEP 768:EufspTfzcR6uWUcb+wmo2q9Ewz/y3qiPIGzjbHgX3iKcK9EKJZKTPBDZsx:EufspTf2g2v0hG3bAXSKcn3dsx
  • TLSH
    T175232B0037E9C12BF2BE4F789DF26145867AB6632A03D6491CC411DB5723BC68A526FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2