Extracted

• • Target
    04e60aef80a162a98bd17fd1c99db40e8e457b0b41dbb25c0d8026c89733dae4
  • Size 45KB
  • SHA256 04e60aef80a162a98bd17fd1c99db40e8e457b0b41dbb25c0d8026c89733dae4
  • MD5 032adc921d934855e5a3b81c956020eb
  • SHA1 a10d71ca23ddadf1cd8977289fee364752149469
  • SHA512 05b279862aef4803f74c73961c47531babac70d25079f407241062318cd1dbff65f5e6a26d10b1a0ce6368cfa5f729f97e6fef671efc8624fd23d2e1c9192e07
  • SSDEEP 768:cuR0JTPUYkEWUmjWymo2q1nfPLzizpvtLjZPI9zjbFgXyi2AAvD5JDEb+kvBDZUx:cuR0JTPjY2OfHi1VjW93bCX7z8DE5ZdW
  • TLSH
    T1A1233A003BE9812BF2BE4F749CF26145867BF2637502DA4A1CC451DB5A13FC69A42AFD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2