Extracted

• • Target
    60730812a5eba652a9b820b07069d6d9139aae61858144a8863fc0bf125aab23
  • Size 45KB
  • SHA256 60730812a5eba652a9b820b07069d6d9139aae61858144a8863fc0bf125aab23
  • MD5 e0da8ea3e8422e0cf8f95d273909dcee
  • SHA1 089e5218513a5beceb0f1b37d9434b489d633b08
  • SHA512 2c6f0bd92618fd9426dcb06e4513563907fbd7493e1c6544f56d0ddb52087f0ecc62f4923be2508afc0e17945016184bab2dbfdf9ebbd5cce89533a7fceef0dd
  • SSDEEP 768:5udApTNctooWUS7C+mo2qttiaLzwJAOPIcFzjbNgXQiYWrICebYMgJBDZ0x:5udApTNmU265U23cF3baXtPvXd0x
  • TLSH
    T16D232B0037E8822BF2BE4F789DF26145867AF6673603D68E1CC451DB5613FC686426EE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2