Extracted

• • Target
    e5eedc0cc6cbc0bd2a936e22142d9ed0009c3e51364744efbd01311a881332fb
  • Size 45KB
  • SHA256 e5eedc0cc6cbc0bd2a936e22142d9ed0009c3e51364744efbd01311a881332fb
  • MD5 32adaf2f29dd51e593f5d856a58fe09e
  • SHA1 fbd53d3fc45b39de40e5478e0112b3d3e246daef
  • SHA512 b469a575b003de1c8de05f7709847252c5530a1dea693a135fe6ce4a5da67694ff276b88202719e96f82c6e60c91e687e0b16f563b02f2b818d11242fc21dabc
  • SSDEEP 768:cu6RaepTPYzbs8WU+Xaamo2q1IxJaxMwHuPIvzjbwgh3ilOZ3FneigG4SIfVfBDg:cu6YepTPso2BeN3v3b3hSYZVVg1SIfV+
  • TLSH
    T1832309003BE9812BF2BF4FB499F26145867AF1632603EA492CC441DB5713BC6DA526FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2