Extracted

• • Target
    383433098126cf36fef98c8f063d78942450553602d9074af48a2eb4aa4c5107
  • Size 45KB
  • SHA256 383433098126cf36fef98c8f063d78942450553602d9074af48a2eb4aa4c5107
  • MD5 8e2504db0a82983925965ba60bec55b4
  • SHA1 8a44cb4b3cbe226621ec23ca93306ba904b2c42b
  • SHA512 141bb836df1d18fb1f8b728a8fc160635891311d75d4ef3f76b3026f56a724d32f5dd7513fe6d6812dab0960224aa929b9009aebbe95720cc12fedcea923f4d8
  • SSDEEP 768:8uuSpTg7GBoWUSH6+mo2qYlCSwTMSPI5Yjb1gX3isP3RquixTYBDZ0x:8uuSpTgyf2dgG5QbSXSsPBquixTed0x
  • TLSH
    T1D9232B003BE8812BF2BE4F7899F25245867AF6673603D58A1CC441DB5713FC69A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2