Extracted

• • Target
    0116776e6273085af6cc504f9348d0a08de0a2e27182a0588c2f75dd649fd999
  • Size 45KB
  • SHA256 0116776e6273085af6cc504f9348d0a08de0a2e27182a0588c2f75dd649fd999
  • MD5 5fc7446a86e108f1f34b6dc78ddc3d81
  • SHA1 14873b2c09c12bb233992385dc62746cbf4a1797
  • SHA512 402e0e8784203560d3373a49b34e739efd7158a9c51f6c7dd211e757e4a38a111052a4b39cb4ab0c5cf44cb700d4e78630cb193e4811fec20b6c7d0d7c36d2c7
  • SSDEEP 768:MuBGJTP0BQ0UWUWHaimo2qV00e3+KvP8iZPIjzjbGgV3iCXSkzw3MjEjNBDZEx:MuBGJTPho273TsiWj3bZVSKNE5ndEx
  • TLSH
    T152231A003BE9812AF2BE4F7899F26245467AF6733603D5491CC451DB5A23FC69A03AFD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2