Extracted

• • Target
    6984f755356499e091063a2446c31a5c05ed1368e517b2c1ce0b291adff28f6f
  • Size 45KB
  • SHA256 6984f755356499e091063a2446c31a5c05ed1368e517b2c1ce0b291adff28f6f
  • MD5 088e805adb32d614d436709f8411d73a
  • SHA1 93006264650ba904e8913acccbfb5768504773b7
  • SHA512 98a9b7e096e8f2838889f45b1f3564cb294e0c7de4f2bab8b53ff985a25dff17c85aea4c2afc8ab019e2568fb8f7e29ccdf6092dc7d5eeac028fa4a35ba5dc81
  • SSDEEP 768:8uUIpT4vvofWWUEXb+Imo2q4wO5QPCBAPSNjPIRzjbSgX3iGuVjsZ15RBDZ0x:8uUIpT4vAj20O5svSKR3bVXSPVjohd0x
  • TLSH
    T106231A0037E8C12BF2BE4F7898F26145867EF6637603E5892CC451DB5623BC696426EE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2