Extracted

• • Target
    6e372cd473f362f7387e31ac801443a6f6b313d516d844d923a6f4d2a057c2d3
  • Size 45KB
  • SHA256 6e372cd473f362f7387e31ac801443a6f6b313d516d844d923a6f4d2a057c2d3
  • MD5 a07c59292e0d977ea3236694896951b8
  • SHA1 8611dad6a482537269a645f6553dba756daf0224
  • SHA512 14628514132b448af035d0df8759c118be3f145d1d1b9825d7c67774b909f7812d09e9070bd3f9d3ee4df75d1a032bb88a17b5aa8591a1be360415e1c8627244
  • SSDEEP 768:cu6RaepTPYzbs8WU+Xaamo2q1W/qpG3jHuPIszjbUgXjiPHFq7ONamegB0+l06t0:cu6YepTPso2zIM3s3b7X+vFeONaPgSG0
  • TLSH
    T1F6232A003BE9822BF2BE4FB8A8F26145867EF5636603D5491CC451DB5723BC68A436FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2