Extracted

• • Target
    6eafbc9e1208617883fdd1ace80aa4b08d6ec94f2fbe4a0717c4ebb849b2a447
  • Size 45KB
  • SHA256 6eafbc9e1208617883fdd1ace80aa4b08d6ec94f2fbe4a0717c4ebb849b2a447
  • MD5 8190e9f3fdf87f105a0d06be5d887291
  • SHA1 566cfb6ad0d8537959b6b339bd985ce5cc474580
  • SHA512 e340f4a4e3c2cfc72cb6f1c74750d64b19fb2e237dd8a02f093343c05a5b62da5ff9f84bd7cc7ae056902512ea4a70d52070c3f518739eca6ce93e660036c720
  • SSDEEP 768:EulCJTHESwgWUK3aGmo2q9UHO9YjoHPICYzjb7gX3iO2SiVmL9BG4E5APcBDZsx:EulCJTHl42A6kgCY3bEXS+i6Sdsx
  • TLSH
    T147232B0037E9C12BF2BE4F78A8F26145467AF6633603E54D1CC452DB5623FC69A426ED
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2