Extracted

• • Target
    9e96e8f13793811422ada2f56aa379979dd753d34377a4ebb816d09f268d8b0c
  • Size 45KB
  • SHA256 9e96e8f13793811422ada2f56aa379979dd753d34377a4ebb816d09f268d8b0c
  • MD5 edd9a2575d6f68b291eade88728002e6
  • SHA1 438bd07ac3353411067654336ab0345046a645d7
  • SHA512 cf2d37bcb86e007529df727711cc9a082762f151306a36f9a41d340ed60e5e0bae4cb984952d00b55942d339ebb8b968d4b26ec99057acb68b28639bfe393bfd
  • SSDEEP 768:0u1YJTHwAUgQWUaT2Wmo2q9e/rLzlJAOPIc6zjbPgXwibjY7IeJBDZ8x:0u1YJTHcw2RPp23c63b4XNb89d8x
  • TLSH
    T142232B0037E8822BF2BE4F7899F26145467EF6673603D68E1CC451DB5613FC68A426EE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2