Extracted

• • Target
    e6a89a7cdce9e3b380330c42d08c317d0cf553e10e1eed53e9deebe64a09ef66
  • Size 45KB
  • SHA256 e6a89a7cdce9e3b380330c42d08c317d0cf553e10e1eed53e9deebe64a09ef66
  • MD5 edb8544eb38a1734cac5f0707a38883a
  • SHA1 9cd7a6227f5226a63e3a0640dce65416e45bdd82
  • SHA512 18b1ca7d699787675d61a62e35b3c2280d4e65fde5275e0e6525f734af829d4c51d3ca13745c710b08c1887ce952e16c90de3cca75ff0d8330a05eea01eef2d7
  • SSDEEP 768:MuLAZTnAkuSWUYzG8mo2qFEfBohEaEPIQYjbjgX3iuDDn9wBDZEx:MuLAZTnbg2Z4EapQQb8XSuDsdEx
  • TLSH
    T1E7232B003BE8822BF2BE4F786DF26145867AF6636603D54D2CC451DB4713FC69A426FA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2