Extracted

• • Target
    098e6a40d0bf804736f879fd632c5bc78fcd3de791f13965631331d315296110
  • Size 45KB
  • SHA256 098e6a40d0bf804736f879fd632c5bc78fcd3de791f13965631331d315296110
  • MD5 5defeb4cd31f5efe0be2e90c9c46ed98
  • SHA1 2d60da032f052e77208f6e9eba3bf8efe8cc58ad
  • SHA512 aadba0335906ac21ed736b327541f62d40f0b9292ab6b840615aa6ac872398f6e03332471757a997f6199e2a00bc1140a6d9bd38f8ef0cfaf6c6ce4a65e0ef09
  • SSDEEP 768:cuR0JTPUYkEWUmjWymo2q1N8V1RpYEcPIazjbbgX3iMpnK/WSnE/BDZUx:cuR0JTPjY2+8VDeEha3bkXSMg74dUx
  • TLSH
    T1AA231A003BE8823BF2BE4F7898F26145867BF6676603D5491CC451DB5623FC68A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2