Extracted

• • Target
    fbbfdd2fd656454cb4fcde672e8f31dd837ab2bdadd3e5005d30834c13ad39b5
  • Size 45KB
  • SHA256 fbbfdd2fd656454cb4fcde672e8f31dd837ab2bdadd3e5005d30834c13ad39b5
  • MD5 163d907dac2ed9eadba97286ea8738e3
  • SHA1 489677a72f20b3d08ff71303a8dfcb60100d5dba
  • SHA512 bb32841b6ba0678375b4683b4989527b9bce659f1c76da2740353334f9093d45cf678529f85458ff047ea6c72d31ba416f1115230190286b2f8285282bff5590
  • SSDEEP 768:cu7m/5THrq+CWUoDuMmo2qFTlsHoPEaMPI1ajbNgX3iMpDIgX6gPoXXfCNbBDZUx:cu7e5TH2A2muuEax12baXSaD9XNKPKN0
  • TLSH
    T178233D003BEC822BF2BE5F786DF26145857AF5A33603D54A1CC452974613FC69A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2