Extracted

• • Target
    857bc3806478cb73978a221549a721385c3ed8d6e4834123137861aa00142d04
  • Size 45KB
  • SHA256 857bc3806478cb73978a221549a721385c3ed8d6e4834123137861aa00142d04
  • MD5 1866f6e124aefb6189c6dbd06cf9a625
  • SHA1 6f368c69c49ab2ea8e6febf2980c9d499eeab442
  • SHA512 53dc6e964c88107b88d7563026cd26d8cefd6bae04115261b481a15bb651c205bead68321d3dcb19d86a663993f7891d50c0b5d3779ac93813e37ce6986546f2
  • SSDEEP 768:MuBGJTP0BQ0UWUWHaimo2qVyLiE0yFjrdj3kk8PIhyjbbgX3iXAvqIzeBDZEx:MuBGJTPho2/LBXDBhebkXSXF2wdEx
  • TLSH
    T15C23190037E8812BF6BE4F74A9F26145867AF6633A03D54D1CC452DB5B23BC58A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2