Extracted

• • Target
    642531e99577301d932cb24863634f3495622a6dca279da5d6721ab101f71415
  • Size 45KB
  • SHA256 642531e99577301d932cb24863634f3495622a6dca279da5d6721ab101f71415
  • MD5 236ab168991fcfdd92bf2d865b4f4c66
  • SHA1 8824812bad79f9ac76b758df0963c85601a72022
  • SHA512 e98a294fb13ec6dc69e6b0f70ce9f16682b1ab71613be0ea8a947713bf436d930b29489ec955f61102f8db479d37359a39cd5200bb01ff5347cf3c9a305de6ea
  • SSDEEP 768:8uUIpT4vvofWWUEXb+Imo2q4T9YikqHztOPIUzjbOgl3i8fXemURkmFhBDZ0x:8uUIpT4vAj2XalK3U3bxlS8B+kWd0x
  • TLSH
    T1E6233B103BE8C12BF2BE5F7899F26141867AF6633603D54A1CC452D74723BC68A526FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2