Extracted

• • Target
    6640b708a2fd60ced4d2cfe7f61a6109f0a93d6096b5cbe0382e9be588da4617
  • Size 45KB
  • SHA256 6640b708a2fd60ced4d2cfe7f61a6109f0a93d6096b5cbe0382e9be588da4617
  • MD5 a73e2fc480e5a3e754170aa220a92d14
  • SHA1 9dd02ae60f2fc539927fc7bec811e31792fe133e
  • SHA512 171812c25bb95134261e5178df179097dc0d51add8be383b3a45fed8cf8152702683f553e6638e57b44cac1fe859ad5d97c99c7a4d3f89385125abf65d257608
  • SSDEEP 768:cuR0JTPUYkEWUmjWymo2q1HVllVc6GcPIAzjbdgX3dD6mrfV2023vxHOBDZUx:cuR0JTPjY2GV/26GhA3bKXN++j2fxgdW
  • TLSH
    T1A5231B0037E9813BF2BE4F7898F26145467EF6636603EA4E1CC451DB5613FC68A426EE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2