Extracted

• • Target
    18cca7a1fcdf2f1353d4a7b78b4d5c9c7298632b650a9a16dfdcebf47fa14323
  • Size 45KB
  • SHA256 18cca7a1fcdf2f1353d4a7b78b4d5c9c7298632b650a9a16dfdcebf47fa14323
  • MD5 7a7fb27fb51ffcb2fb68c7be7990d556
  • SHA1 7eb713a9046c48f0af560072f64153c5dc99c4ff
  • SHA512 be7de01b4d0ea34f8aba62a3115ecfe8ca36c8011a5681c4de36fb258180b6ffcb430e5a552ac6fe62f6ab909718eefa64253a002b55f8b671bba9bd3ee940fd
  • SSDEEP 768:ouuSpTg7GBoWUSH6+mo2qYZGFZQjB4PIFfzjbHgX3ix3XT3ngT24w0wGBDZIx:ouuSpTgyf2kqF9Ff3bAXSx3j3ngT24cf
  • TLSH
    T167230B003BE9C12BF2BE4F78ADF26145867AF6633603D54D1C8451DB5623FC68A426EE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2