Extracted

• • Target
    e6df7a8d5c5bd2309d7b4cac9035278ceb22f720da21f9f96a7e2593a0becf1f
  • Size 45KB
  • SHA256 e6df7a8d5c5bd2309d7b4cac9035278ceb22f720da21f9f96a7e2593a0becf1f
  • MD5 292c5fe27c821078cfec47042026b6ea
  • SHA1 72fc7ed17e2141b7bec26fbf1213f46b6b8ae5a9
  • SHA512 09fbbb57fdaa62d9c0b3d8757fb9c09068a4eb80760586c274cc4ae71835e4e8a8419b40358a73723a86346d5ca4eb5b68019e2ba93e11c084de8d3a40df03d7
  • SSDEEP 768:UuKWgSJTwU6NkWUGnaSmo2qADxJaxrPHuPIHzjbmgn3ix8ngMVuxmTPYh+jqcPBs:UuKWgSJTwRf2TeR3H3b5nSx8ngMw1Ufs
  • TLSH
    T1E6231A003BE9812BF2BE4FB8ACF26145867AF2637603D5492CC451DB5623FC696426FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2