Extracted

• • Target
    558ed2853b844a203302d2678cf3f0c0d09e878b5dd250d00a3b21f2c6900696
  • Size 45KB
  • SHA256 558ed2853b844a203302d2678cf3f0c0d09e878b5dd250d00a3b21f2c6900696
  • MD5 6f8590f7dafaea4ff72bc197d35601b5
  • SHA1 72e42bc70d3ffe29cb47763caced76a1f9e78d4e
  • SHA512 7eb474b7af1f43701e7a74b15a010127aa4ba93460413b3f25e5badb6185e17fbc45de51a3505dc0fa9d249126db9c1f8cbe55949315f30505d703d35ac04ef7
  • SSDEEP 768:8uUIpT4vvofWWUEXb+Imo2q44O5QSCBzHSNjPI7zjbLgX3i4ZdK5NfyvBDZ0x:8uUIpT4vAj28O59ESK73b0XS4Okd0x
  • TLSH
    T10B232A003BE9812BF2BE4F7898F26145467AF2636603D98E2CC452DB5713BC696426FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2