Extracted

• • Target
    91dc8137cb5764116b93d391f43d4f5a2888633d1f0f95504e3b8a3ed6ca0a96
  • Size 45KB
  • SHA256 91dc8137cb5764116b93d391f43d4f5a2888633d1f0f95504e3b8a3ed6ca0a96
  • MD5 2e8c47cfb5b6417711cde5775fc8ebe3
  • SHA1 820971cdba645bd7f4810afcafef503a6d2bcff5
  • SHA512 6ac2c75a6e1590b1a7ea9c7a8ea535b5cee1a80bc874cea2e516048e29ffe46b9ee68a91134a5453fd685b75346b1f894279f5e590c3deda2144a5f76f288f1c
  • SSDEEP 768:0uPrpT/LGKeWUszuAmo2q9aiScy3zlOPIxzjbMg73ikZ/0ha/x3BDZ8x:0uPrpT/qY2ni963x3bD7SSYa/3d8x
  • TLSH
    T12D232A003BE9812BF2BE5F7899F26145867AF6632603D64E1CC411DB5B13FC68A426FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2