Extracted

• • Target
    d4f707da76add30e0fbc6932c765371fe28d502a1ed3a87e8ad294be4030d81e
  • Size 45KB
  • SHA256 d4f707da76add30e0fbc6932c765371fe28d502a1ed3a87e8ad294be4030d81e
  • MD5 a6fc3f7b3e3429073aa716a6c1762847
  • SHA1 3a3acb456a0237e9b91f1cf1a3216dc21bd86504
  • SHA512 494bb6867cc97895dfdf38d0f31367ef3159988bb61a4c73a4361dbf65bccc3f17e012b79a6167f282abe5e7f8f666143ba9eaf84a3b3c9edcdecb3d1d76da79
  • SSDEEP 768:EufspTfzcR6uWUcb+wmo2q98zjHy/aKPIb9jb6gX3ipQgMmpgliELBDZsx:EufspTf2g23nhbVbtXSpQZGEddsx
  • TLSH
    T126232B0037E8C12BF2BE5F789DF26145867EF6672603D68E1CC4119B1613BC68A526FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2