Extracted

• • Target
    ff801e6b1d7d877f42b4793b6f58462a594c7f1027e1a88fdd0ea04657e8b4b7
  • Size 45KB
  • SHA256 ff801e6b1d7d877f42b4793b6f58462a594c7f1027e1a88fdd0ea04657e8b4b7
  • MD5 b9d91d93582e600068682ff441b9ed8b
  • SHA1 c52636d8a7cf7596157f7734ede645a5be13645f
  • SHA512 c2b3864df21986164097c3b51b1a59aa969caf0351d10a5d2a7cd87ac5f4c6c08a213f6cd83252631d25a6219d640b8e59a2ee29b267e0de840dfe16f07e9536
  • SSDEEP 768:kuSOpTPTCFcWUeXa6mo2qAhpt0CCMhdjCvS8PIjYjb3gX3iKz3KvE9WBDZMx:kuSOpTPOP2x/CChBjQbQXSKWvS4dMx
  • TLSH
    T181231B003BE9812BF2BE4F7469F25245867AF6732603D54D1C8451DB5B23FC68A43AEE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2