Extracted

• • Target
    0c1d0a4a7acb43bbcebcc6d2deb672edf8e54121199f5c882393f99490224d89
  • Size 45KB
  • SHA256 0c1d0a4a7acb43bbcebcc6d2deb672edf8e54121199f5c882393f99490224d89
  • MD5 8709378f86bd13d3b617364903c79d3c
  • SHA1 4564f415c5ac3cd95b2b8c7c7ec8427d4ddbd417
  • SHA512 96f1fed612e5bfc41ef04d96627d55c01355fec3cba2310136b7dc15cc8446264dcca72507562e14559b61a32cea426341158f42169786b298437383962c32a0
  • SSDEEP 768:UuKWgSJTwU6NkWUGnaSmo2qASq6c53APIqzjbdgX3rGY9w5LMBDZcx:UuKWgSJTwRf2ib03lq3bKX7GY9+Kdcx
  • TLSH
    T1DE232A003BE8C13BF2BE4FB899F26245467AF2637603D6491CC451DB5623FC69A426ED
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2