Extracted

• • Target
    85d3d9373b40e3162c51ba64dea3cd6bf56e99bc18ac4dd1b185441363f51de7
  • Size 45KB
  • SHA256 85d3d9373b40e3162c51ba64dea3cd6bf56e99bc18ac4dd1b185441363f51de7
  • MD5 f7d6ce772e3d43a74769c02cffff79fc
  • SHA1 394e2f10b8c82b1c5a627941d9e975148aa48f82
  • SHA512 54aff9787f89fad75157bd8bf584eed509466c4565b0466fc62a37dbb80516a0a11fe991027e0980e8513215d0bfa0667615cd99f16e9d8d72355093b77d0276
  • SSDEEP 768:cu7m/5THrq+CWUoDuMmo2qFkEl3dGuiPIWzjbwgX3iMCButKw72KmBDZUx:cu7e5TH2A2vEPJW3b3XSMCButJ2KodUx
  • TLSH
    T196232C003BE8C12BF2BE4FB89DF26145867AF6733603D58A1CC451D75613BC696426FA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2